Overview
- Description
- The StreamWeasels YouTube Integration plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's sw-youtube-embed shortcode in all versions up to, and including, 1.3.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
- Source
- security@wordfence.com
- NVD status
- Awaiting Analysis
Risk scores
CVSS 3.1
- Type
- Primary
- Base score
- 6.4
- Impact score
- 2.7
- Exploitability score
- 3.1
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
- Severity
- MEDIUM
Weaknesses
- security@wordfence.com
- CWE-79
Social media
- Hype score
- Not currently trending
CVE-2024-10185 (Published: 2024-10-29) affects StreamWeasels. This medium-severity vulnerability impacts specific versions. To mitigate risks, ensure you update to the latest version and apply all recommended patches. Stay secure! More info: https://t.co/ehYRP1Zgbl #CyberSecurity
@transilienceai
1 Nov 2024
3 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
CVE-2024-10185 (Published: 2024-10-29) affects StreamWeasels. This medium-severity vulnerability impacts specific versions. To mitigate risks, ensure you update to the latest version and follow recommended security practices. Stay informed and secure! More details:… https://t.co/
@transilienceai
1 Nov 2024
2 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
🚨 CVE-2024-10185 (Published: 2024-10-29) - High severity vulnerability in StreamWeasels. Affects versions prior to the latest release. 🛠️ Remediation: Update to the latest version available at [StreamWeasels Plugin](https://t.co/pFCQb0aFEw) to secure your site! #WordPress… http
@transilienceai
1 Nov 2024
1 Impression
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
🚨 CVE-2024-10185 (Published: 2024-10-29) - High severity vulnerability in WordPress. Affects multiple versions. Ensure your site is updated to the latest version to mitigate risks. Check the remediation details here: https://t.co/Ql34Yejs3w #WordPress #CVE #CyberSecurity
@transilienceai
1 Nov 2024
8 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
CVE-2024-10185 The StreamWeasels YouTube Integration plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's sw-youtube-embed shortcode in all versions up… https://t.co/JYbry64KMn
@CVEnew
29 Oct 2024
323 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes