CVE-2024-7655

MediumCVSS 4.8/10Last modified Jun 17, 2026

Description

The Community by PeepSo – Social Network, Membership, Registration, User Profiles plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 6.4.5.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.

Metrics

CVSS 3.1 4.8/10CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Sep 10, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-76568.8The Image Hotspot by DevVN plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.2.5 via deseriCVE-2024-76575.4A vulnerability classified as problematic was found in Gila CMS 1.10.9. This vulnerability affects unknown code of the file /cm/update_rows/CVE-2024-76585.3A vulnerability, which was classified as problematic, has been found in projectsend up to r1605. This issue affects the function get_previewCVE-2024-76597.5A vulnerability, which was classified as problematic, was found in projectsend up to r1605. Affected is the function generate_random_string CVE-2024-76606.1A vulnerability has been found in SourceCodester File Manager App 1.0 and classified as problematic. Affected by this vulnerability is an unCVE-2024-76618.8A vulnerability was found in SourceCodester Car Driving School Management System 1.0. It has been classified as problematic. This affects thCVE-2024-76626.5A vulnerability was found in SourceCodester Car Driving School Management System 1.0. It has been declared as problematic. This vulnerabilitCVE-2024-76635.3A vulnerability was found in SourceCodester Car Driving School Management System 1.0. It has been rated as critical. This issue affects someCVE-2024-76644.3A vulnerability classified as critical has been found in SourceCodester Car Driving School Management System 1.0. Affected is an unknown funCVE-2024-76654.3A vulnerability classified as critical was found in SourceCodester Car Driving School Management System 1.0. Affected by this vulnerability CVE-2024-76665.3A vulnerability, which was classified as critical, has been found in SourceCodester Car Driving School Management System 1.0. Affected by thCVE-2024-76675.3A vulnerability, which was classified as critical, was found in SourceCodester Car Driving School Management System 1.0. This affects the fu