CVE-2024-5811

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

The Simple Video Directory WordPress plugin before 1.4.4 does not sanitise and escape some of its settings, which could allow contributors and higher to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Jul 12, 2024
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-581107.5Buffer overflow vulnerability in the codec module Impact: Successful exploitation of this vulnerability may affect availability.CVE-2024-581117.5Exception capture failure vulnerability in the SVG parsing module of the ArkUI framework Impact: Successful exploitation of this vulnerabiliCVE-2024-581127.5Exception capture failure vulnerability in the SVG parsing module of the ArkUI framework Impact: Successful exploitation of this vulnerabiliCVE-2024-581137.5Vulnerability of improper resource management in the memory management module Impact: Successful exploitation of this vulnerability may affeCVE-2024-581144.0Resource allocation control failure vulnerability in the ArkUI framework Impact: Successful exploitation of this vulnerability may affect avCVE-2024-581157.5Buffer overflow vulnerability in the SVG parsing module of the ArkUI framework Impact: Successful exploitation of this vulnerability may affCVE-2024-581167.5Buffer overflow vulnerability in the SVG parsing module of the ArkUI framework Impact: Successful exploitation of this vulnerability may affCVE-2024-581173.3Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitation of this vulnerability may affect the fCVE-2024-58122.7A low severity vulnerability in BIPS has been identified where an attacker with high privileges or a compromised high privilege account can CVE-2024-581249.1Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrityCVE-2024-581259.1Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrityCVE-2024-581269.1Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity
CVE-2024-5811: Medium severity, CVSS 5.4 | Vulnix