{"vulnerability": "CVE-2024-3368", "sightings": [{"uuid": "5525b97d-59a3-4f42-8c9b-2a5cbb82d2c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-3368", "type": "published-proof-of-concept", "source": "Telegram/QBqDK5N11DoHS9DV6R6GvVy3iAa2bKhOXUUof8K7tGZD", "content": "", "creation_timestamp": "2024-05-22T09:32:11.000000Z"}, {"uuid": "c485a77a-ba4b-4d3c-8a90-58d686463d9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-3368", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7611", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-3368\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The All in One SEO  WordPress plugin before 4.6.1.1 does not validate and escape some of its Post fields before outputting them back, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks\n\ud83d\udccf Published: 2024-05-20T06:00:01.083Z\n\ud83d\udccf Modified: 2025-03-14T17:20:36.410Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/ab78b1a5-e28c-406b-baaf-6d53017f9328/", "creation_timestamp": "2025-03-14T17:48:56.000000Z"}, {"uuid": "3f441607-b5ec-4b71-b97e-39c2dbb99b37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-3368", "type": "published-proof-of-concept", "source": "https://t.me/openSource3/129", "content": "CVE ID : CVE-2024-3368\nSystem : wordpress < 4.6.1.1\nType : Stored xss\n\nExploit :\n\nAs a contributor, create a post and put the following payload in the \"Meta Description\" field:  Save the post (as a draft or submit for review), the XSS will be triggered when any user (like an admin) edit the post again\n\u0627\u0644\u0627\u0633\u062a\u063a\u0644\u0627\u0644 :\n\u0643\u0645\u0633\u0627\u0647\u0645\u060c \u0642\u0645 \u0628\u0625\u0646\u0634\u0627\u0621 \u0645\u0646\u0634\u0648\u0631 \u0648\u0648\u0636\u0639 \u0627\u0644\u0628\u0627\u0644\u0648\u062f \u0627\u0644\u062a\u0627\u0644\u064a \u0641\u064a \u062d\u0642\u0644\n \"Meta Description \": \n\n \u0627\u062d\u0641\u0638 \u0627\u0644\u0645\u0646\u0634\u0648\u0631 (\u0643\u0645\u0633\u0648\u062f\u0629 \u0623\u0648 \u0623\u0631\u0633\u0644\u0647 \u0644\u0644\u0645\u0631\u0627\u062c\u0639\u0629)\u060c \u0648\u0633\u064a\u0642\u0648\u0645 XSS \u0628\u0630\u0644\u0643 \u064a\u062a\u0645 \u062a\u0634\u063a\u064a\u0644\u0647 \u0639\u0646\u062f\u0645\u0627 \u064a\u0642\u0648\u0645 \u0623\u064a \u0645\u0633\u062a\u062e\u062f\u0645 (\u0645\u062b\u0644 \u0627\u0644\u0645\u0633\u0624\u0648\u0644) \u0628\u062a\u062d\u0631\u064a\u0631 \u0627\u0644\u0645\u0646\u0634\u0648\u0631 \u0645\u0631\u0629 \u0623\u062e\u0631\u0649", "creation_timestamp": "2024-05-22T09:27:19.000000Z"}, {"uuid": "68019889-e8c6-40a8-a1a8-87f068ff6e01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-3368", "type": "seen", "source": "https://t.me/HackingInsights/723", "content": "\u200aCVE-2024-3368 Vulnerability in All in One SEO Plugin Threatens Millions of WordPress Sites\n\nhttps://securityonline.info/cve-2024-3368-vulnerability-in-all-in-one-seo-plugin-threatens-millions-of-wordpress-sites/", "creation_timestamp": "2024-05-21T15:29:59.000000Z"}]}