Skip to content
CVE PROGRAM SOURCE RECORD4.8 Medium

CVE-2024-8492

Hustle < 7.8.5 - Admin+ Stored XSS

Description

The Hustle WordPress plugin through 7.8.5 does not sanitise and escape some of its settings, which could allow high privilege users such as editors to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Hustle

Default version status: affected

  • 0 to ≤ 7.8.5affected

References