CVE-2024-10515

LOW

3.5

Description

In the process of testing the SEO Plugin by Squirrly SEO WordPress plugin before 12.3.21, a vulnerability was found that allows you to implement Stored XSS on behalf of the editor by embedding malicious script, which entails account takeover backdoor

Details CVE

Score CVSS v3.13.5

SeveriteLOW

Vecteur CVSSCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N

Vecteur d'attaqueNETWORK

ComplexiteLOW

Privileges requisHIGH

Interaction utilisateurREQUIRED

Publie11/20/2024

Derniere modification3/31/2025

Sourcenvd

Observations honeypot0

Produits affectes

squirrly:seo_plugin_by_squirrly_seo

Faiblesses (CWE)

CWE-79

References

https://wpscan.com/vulnerability/367aad17-fbb5-48eb-8829-5d3513098d02/(contact@wpscan.com)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.