Threats tagged 'ghsa-vq6v-qjj6-f2p8'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Low	3.5	CVE-2024-3586The LetterPress WordPress plugin before 2.4.0 does not sanitise and escape some of its settings, which could allow Low3.52026-10-29GCVE DatabaseCVE-2024-3586 The LetterPress WordPress plugin versions before 2.4.0 do not properly sanitise and escape certain settings. This vulnerability allows high privilege users, such as administrators, to perform Stored Cross-Site Scripting (XSS) attacks even if the unfiltered_html capability is disabled, for example in multisite WordPress setups. Report on CVE-2024-3586 Vulnerability #ghsa-vq6v-qjj6-f2p8	GCVE Database	2026-10-29

Page 1 of 1