Skip to content
CVE PROGRAM SOURCE RECORD5.4 Medium

CVE-2024-9021

Relevanssi < 4.23.1 - Contributor+ Stored XSS

Description

In the process of testing the Relevanssi WordPress plugin before 4.23.1, a vulnerability was found that allows you to implement Stored XSS on behalf of the Contributor+ by embedding malicious script, which entails account takeover backdoor

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Relevanssi

Default version status: unaffected

  • 0 to < 4.23.1affected

References