CVE-2024-5811

MEDIUM

Simple Video Directory < 1.4.4 - Contributor+ Stored XSS

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2024-5811 has a selected CVSS score of 6.1 (medium).

Description

The Simple Video Directory WordPress plugin before 1.4.4 does not sanitise and escape some of its settings, which could allow contributors and higher to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationPoC
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Jul 12, 2024 · Source: CVE List

Affected products and versions

2
ProductSourceVersion range

Simple Video Directory

Default status: unaffected

CVE ListBefore 1.4.4affected

simple_video_directory

Browse quantumcloud / simple_video_directory

Default status: unknown

CVE ListBefore 1.4.4affected

References

2