CVE-2024-9182

The Maspik WordPress plugin before 2.1.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed.
Configurations

No configuration.

History

17 May 2025, 04:16

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 4.8

16 May 2025, 14:42

Type Values Removed Values Added
Summary
  • (es) El complemento Maspik para WordPress anterior a la versión 2.1.3 no depura ni escapa de algunas de sus configuraciones, lo que podría permitir a usuarios con privilegios elevados como el administrador realizar ataques de Cross-Site Scripting incluso cuando unfiltered_html no está permitido.

15 May 2025, 20:16

Type Values Removed Values Added
New CVE

Information

Published : 2025-05-15 20:16

Updated : 2025-05-17 04:16


NVD link : CVE-2024-9182

Mitre link : CVE-2024-9182

CVE.ORG link : CVE-2024-9182


JSON object : View

Products Affected

No product.

CWE

No CWE.