CVE-2024-11503: WP Tabs < 2.2.7 - Admin+ Stored XSS
The WP Tabs WordPress plugin before 2.2.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed (for example in multisite setup).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-11503?
CVE-2024-11503 has a high severity level due to its potential for allowing stored Cross-Site Scripting attacks by high privilege users.
How do I fix CVE-2024-11503?
To fix CVE-2024-11503, update the WP Tabs plugin to version 2.2.7 or later.
Who is affected by CVE-2024-11503?
CVE-2024-11503 affects users of the WP Tabs plugin prior to version 2.2.7, particularly in WordPress multisite setups.
What type of vulnerability is CVE-2024-11503?
CVE-2024-11503 is a stored Cross-Site Scripting vulnerability.
Can CVE-2024-11503 be exploited by non-admin users?
No, CVE-2024-11503 can only be exploited by high privilege users such as admins.