CVE-2024-11718: tarteaucitron.js for WordPress < 0.3.0 - Author+ Stored XSS
The tarteaucitron-wp WordPress plugin before 0.3.0 allows author level and above users to add HTML into a post/page, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-11718?
CVE-2024-11718 is classified as a security vulnerability that could allow stored cross-site scripting attacks.
How do I fix CVE-2024-11718?
To fix CVE-2024-11718, update the tarteaucitron-wp WordPress plugin to version 0.3.0 or higher.
Who is affected by CVE-2024-11718?
Users with author level or above roles in the tarteaucitron-wp WordPress plugin prior to version 0.3.0 are affected by CVE-2024-11718.
What kind of attack is possible with CVE-2024-11718?
CVE-2024-11718 allows users to perform stored cross-site scripting attacks due to improper handling of HTML in posts/pages.
Which WordPress plugin is impacted by CVE-2024-11718?
CVE-2024-11718 impacts the tarteaucitron-wp WordPress plugin, specifically versions prior to 0.3.0.