VDB
CVE-2024-6307
CVE-2024-6307
PUBLISHED
CVSS 8.5 HIGH
WordPress Core < 6.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via HTML API
EPSS 0.63% · 70.8th percentile
Risk Scores
CVSS 4.0
8.5
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
EPSS Score
0.63%
70.8th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bitnami | wordpress | 5.9.0, 6.0.0, 6.1.0 |
| Bitnami | wordpress | 5.9.0, 6.1.0, 6.2.0 |
| Bitnami | wordpress-multisite | 5.9.0, 6.0.0, 6.1.0 |
| Bitnami | wordpress-multisite | 5.9.0, 6.0.0, 6.1.0 |
Timeline
- Jun 25, 2024 CVE Published
- Jun 26, 2024 EPSS Score
- Jul 18, 2024 EPSS Score
- Aug 1, 2024 CVE Updated
- Aug 10, 2024 EPSS Score
- Sep 1, 2024 EPSS Score
- Oct 5, 2024 Coalition ESS Score
- Oct 16, 2024 EPSS Score
- Oct 16, 2024 Coalition ESS Score
- Nov 8, 2024 EPSS Score
- Nov 30, 2024 EPSS Score
- Dec 24, 2024 EPSS Score
References
- https://core.trac.wordpress.org/changeset/58472 url
- https://core.trac.wordpress.org/changeset/58473 url
- https://wordpress.org/news/2024/06/wordpress-6-5-5/ url
- https://www.wordfence.com/threat-intel/vulnerabilities/id/bc0d36f8-6569-49a1-b722-5cf57c4bb32a?source=cve url
- https://nvd.nist.gov/vuln/detail/CVE-2024-6307 url