Lucene search
WPScanCVE-2024-1752HistoryApr 08, 2024 - 5:15 a.m.
CVE-2024-1752
2024-04-0805:15:07
WPScan
web.nvd.nist.gov
31
cve-2024-1752
reserved
security problem
publicized
details
nvd
The Font Farsi WordPress plugin through 1.6.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
Affected configurations
Node
font_projectfontRange≤1.6.6wordpress
| Vendor | Product | Version | CPE |
|---|---|---|---|
| font_project | font | * | cpe:2.3:a:font_project:font:*:*:*:*:*:wordpress:*:* |
CNA Affected
[
{
"vendor": "Unknown",
"product": "Font Farsi",
"versions": [
{
"status": "affected",
"versionType": "semver",
"version": "0",
"lessThanOrEqual": "1.6.6"
}
],
"defaultStatus": "affected",
"collectionURL": "https://wordpress.org/plugins"
}
]Related
cvelist
cvelist
CVE-2024-1752 Font Farsi <= 1.6.6 - Admin+ Stored XSS in Settings
2024-04-08 05:00:02
nvd
nvd
CVE-2024-1752
2024-04-08 05:15:07
CVE-2024-3093
2024-04-09 19:15:39
vulnrichment
vulnrichment
CVE-2024-1752 Font Farsi <= 1.6.6 - Admin+ Stored XSS in Settings
2024-04-08 05:00:02
wpvulndb
wpvulndb
Font Farsi <= 1.6.6 - Admin+ Stored XSS in Settings
2024-03-18 00:00:00
wpexploit
wpexploit
Font Farsi <= 1.6.6 - Admin+ Stored XSS in Settings
2024-03-18 00:00:00
cve
cve
CVE-2024-3093
2024-04-09 19:15:39