CVE-2024-53278CWE-79

Cross-site scripting vulnerability exists in WP Admin UI Customize versions prior to ver 1.5.14

Medium · published November 26, 2024

CVSS v3.0
4.8
EPSS
0%
Percentile
30.7
In the wild
Unconfirmed
What it is

Cross-site scripting vulnerability exists in WP Admin UI Customize versions prior to ver 1.5.14. If a malicious admin user customizes the admin screen with some malicious contents, an arbitrary script may be executed on the web browser of the other users who are accessing the admin screen.

The record
Technical detail
CVSS v3.0
4.8 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00379 · 30.7th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2024-11-26T04:33Z
EPSS history
Timeline
  • 26 NOV 04:33Z
    Cross-site scripting vulnerability exists in WP Admin UI Customize versions prior to ver 1.5.14
    cvelistv5