CVE-2024-6701

MediumCVSS 4.8/10Last modified Jun 17, 2026

Related CVEs from 2024

CVE-2024-67024.8Pega Platform versions 8.1 to Infinity 24.1.2 are affected by an HTML Injection issue with Stage.CVE-2024-67035.4The Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder plugin for WordPress is vulnerable to Stored CrossCVE-2024-67046.1The Comments – wpDiscuz plugin for WordPress is vulnerable to HTML Injection in all versions up to, and including, 7.6.21. This is due to a CVE-2024-67055.5The RegLevel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.2.CVE-2024-67066.1Attackers can craft a malicious prompt that coerces the language model into executing arbitrary JavaScript in the context of the web page.CVE-2024-67078.8Attacker controlled files can be uploaded to arbitrary locations on the web server's filesystem by abusing a path traversal vulnerability.CVE-2024-67084.8The User Profile Builder WordPress plugin before 3.12.2 does not sanitise and escape some parameters before outputting its content on the aCVE-2024-67094.3The Sync Post With Other Site plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on tCVE-2024-67105.4The Ditty WordPress plugin before 3.1.45 does not sanitise and escape some parameters, which could allow users with a role as low as ContriCVE-2024-67113.5The Event Tickets with Ticket Scanner WordPress plugin before 2.3.8 does not sanitise and escape some parameters, which could allow users wiCVE-2024-67126.1The MapFig Studio WordPress plugin through 0.2.1 does not have CSRF check in some places, and is missing sanitisation as well as escaping, wCVE-2024-67134.8The PVN Auth Popup WordPress plugin through 1.0.0 does not sanitise and escape some of its settings, which could allow high privilege users
CVE-2024-6701: Medium severity, CVSS 4.8 | Vulnix