CVE Database /
CVE-2024-2484
CVE · Medium
CVE-2024-2484 — Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More [themeisle-companion] < 2.10.35
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2024-2484
|
Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More [themeisle-companion] < 2.10.35 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
Medium
5.4
|
< 2.10.35
|
2.10.35 |
2024-06-21 |
—
|
CVE-2024-2484
The Orbit Fox by ThemeIsle plugin for WordPress contains a stored cross-site scripting vulnerability affecting versions up to 2.10.34 in the Services and Post Type Grid widgets. Authenticated users with contributor privileges or higher can inject malicious scripts due to inadequate sanitization of input and escaping of output, allowing these scripts to execute for anyone viewing the affected pages.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings