cve,link,title,description,vendor,products,score,severity,epss,cisa,cisa_published,article,ransomware,exploited,poc,trended,trended_no_1,published,trended_score
CVE-2024-11906,https://securityvulnerability.io/vulnerability/CVE-2024-11906,Stored Cross-Site Scripting Vulnerability in TPG Get Posts Plugin for WordPress,"The TPG Get Posts plugin for WordPress is vulnerable to a Stored Cross-Site Scripting (XSS) attack via the 'tpg_get_posts' shortcode in all versions up to and including 3.6.5. This vulnerability arises from inadequate input sanitization and output escaping on user-supplied attributes. As a result, authenticated attackers with contributor-level access or higher can inject arbitrary web scripts into pages. These injected scripts execute each time the compromised page is accessed, posing significant security risks to users and potentially compromising sensitive information.",Wordpress,Tpg Get Posts,6.4,MEDIUM,0.0005300000193528831,false,,false,false,false,,false,false,2024-12-17T00:15:00.000Z,0