CVE-2024-2444: Inline Related Posts < 3.5.0 - Admin+ Stored XSS
The Inline Related Posts WordPress plugin before 3.5.0 does not sanitise and escape some of its settings, which could allow high privilege users such as Admin to perform Cross-Site Scripting attacks even when unfilteredhtml is disallowed
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-2444?
CVE-2024-2444 is classified as a vulnerability that could allow Cross-Site Scripting attacks, posing significant risks especially to high privilege users.
How do I fix CVE-2024-2444?
To fix CVE-2024-2444, you should update the Inline Related Posts plugin to version 3.5.0 or later.
Who is affected by CVE-2024-2444?
CVE-2024-2444 affects users of the Inline Related Posts WordPress plugin versions prior to 3.5.0.
What type of attack does CVE-2024-2444 enable?
CVE-2024-2444 enables Cross-Site Scripting (XSS) attacks due to insufficient sanitisation and escaping of plugin settings.
Can unfiltered_html settings mitigate CVE-2024-2444?
No, CVE-2024-2444 can be exploited even when the unfiltered_html setting is disallowed for users.