CVE-2024-22158 WordPress PeepSo Core: Photos Plugin < 6.3.1.0 is vulnerable to Cross Site Scripting (XSS)
MediumCVSS 5.4
EPSS 0.32%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PeepSo Community by PeepSo – Social Network, Membership, Registration, User Profiles allows Stored XSS.This issue affects Community by PeepSo – Social Network, Membership, Registration, User Profiles: from n/a before 6.3.1.0.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| PeepSo Community by PeepSo – Social Network, Membership, Registration, User Profiles | < 6.3.1.0 | 6.3.1.0 |
| PeepSo | < 6.3.1.0 | 6.3.1.0 |
| wordpress peepso-photos(WordPress) | < 6.3.1.0 | 6.3.1.0 |
References
- patchstack.com third-party-advisory vdb-entry
- Wordfence Intelligence third-party-advisory
- www.cve.org