Skip to content
CVE PROGRAM SOURCE RECORD5.0 Medium

CVE-2024-4899

SEOPress < 7.8 - Contributor+ Stored XSS

Description

The SEOPress WordPress plugin before 7.8 does not sanitise and escape some of its Post settings, which could allow high privilege users such as contributor to perform Stored Cross-Site Scripting attacks.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown SEOPress

Default version status: unaffected

  • 0 to < 7.8affected

References