Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2024-13896

WP-GeSHi-Highlight <= 1.4.3 - Author+ ReDoS

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
WPScan

Description

The WP-GeSHi-Highlight — rock-solid syntax highlighting for 259 languages WordPress plugin through 1.4.3 processes user-supplied input as a regular expression via the wp_geshi_filter_replace_code() function, which could lead to Regular Expression Denial of Service (ReDoS) issue

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown WP-GeSHi-Highlight — rock-solid syntax highlighting for 259 languages

Default version status: affected

  • 0 to ≤ 1.4.3affected

References