CVE-2024-9839
Improper Control of Generation of Code ('Code Injection') (CWE-94)
Published: Nov 16, 2024 / Updated: 4d ago
010
CVSS 7.3EPSS 0.05%High
CVE info copied to clipboard
The The Uix Slideshow plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.6.5. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Timeline
First Article
Feedly found the first article mentioning CVE-2024-9839. See article
Nov 16, 2024 at 3:38 AM / Vulners.com RSS Feed
CVSS Estimate
Feedly estimated the CVSS score as HIGH
Nov 16, 2024 at 3:38 AM
CVE Assignment
NVD published the first details for CVE-2024-9839
Nov 16, 2024 at 4:15 AM
CVSS
A CVSS base score of 7.3 has been assigned.
Nov 16, 2024 at 4:20 AM / nvd
EPSS
EPSS Score was set to: 0.05% (Percentile: 21.9%)
Nov 16, 2024 at 10:07 AM
Affected Systems
Wordpress/wordpress
+null more
Attack Patterns
CAPEC-242: Code Injection
+null more
News
CVE-2024-9839
Gravedad 3.1 (CVSS 3.1 Base Score) This makes it possible for unauthenticated attackers to execute arbitrary shortcodes.
Arbitrary Shortcode Execution Vulnerability in Uix Slideshow Plugin
Uiuxlab - HIGH - CVE-2024-9839 The The Uix Slideshow plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.6.5. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes.
CVE-2024-9839 - "WordPress Uix Slideshow Plugin Arbitrary Shortcode Execution Vulnerability"
CVE ID : CVE-2024-9839 Published : Nov. 16, 2024, 4:15 a.m. 51 minutes ago Description : The The Uix Slideshow plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.6.5. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes. Severity:
CVE-2024-9839
The The Uix Slideshow plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.6.5. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary...
Content warning: WORDPRESS UIUXLAB UIX SLIDESHOW CVE-2024-9839 CVE-2024-9839 Uix Slideshow https://www. cve.org/CVERecord?id=CVE-2024- 9839 https://www. wordfence.com/threat-intel/vul nerabilities/id/f189f606-ec30-4f5d-81c9-d526ba7141f0?source=cve https:// wordpress.org/plugins/uix-slid eshow/#developers https:// plugins.trac.wordpress.org/bro wser/uix-slideshow/trunk/includes/shortcodes.php#L26 # wordpress # uiuxlab # UixSlideshow # CVE_2024_9839 # bot
See 2 more articles and social media posts