VDB
CVE-2024-2310
CVE-2024-2310
PUBLISHED
CVSS 9.300000190734863 CRITICAL
The WP Google Review Slider WordPress plugin before 13.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
EPSS 0.31% · 23.8th percentile
Risk Scores
CVSS 4.0
9.300000190734863
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
EPSS Score
0.31%
23.8th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Unknown | WP Google Review Slider | 0, 0 |
| wordpress | WP_google_review_slider | *, * |
| ljapps | wp_google_review_slider | 0, 0 |
Timeline
- Apr 26, 2024 EPSS Score
- Apr 26, 2024 CVE Published
- May 21, 2024 EPSS Score
- Jun 15, 2024 EPSS Score
- Jul 10, 2024 EPSS Score
- Sep 2, 2024 EPSS Score
- Sep 26, 2024 EPSS Score
- Oct 4, 2024 Coalition ESS Score
- Oct 21, 2024 EPSS Score
- Nov 15, 2024 EPSS Score
- Dec 11, 2024 EPSS Score
- Jan 4, 2025 EPSS Score