{"title":"WordPress Graphina plugin <= 1.8.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets vulnerability","description":"Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets vulnerability discovered by stealthcopter in WordPress Plugin Graphina (versions <= 1.8.9)","affected_in":"<= 1.8.9","fixed_in":"1.8.10","references":[{"slug":"patchstack","label":"PatchStack","refs":[{"value":"wordpress-graphina-plugin-1-8-9-authenticated-contributor-stored-cross-site-scripting-via-multiple-widgets-vulnerability","label":"Details","link":"https:\/\/patchstack.com\/database\/vulnerability\/graphina-elementor-charts-and-graphs\/wordpress-graphina-plugin-1-8-9-authenticated-contributor-stored-cross-site-scripting-via-multiple-widgets-vulnerability?_a_id=431"}]},{"slug":"cve","label":"CVE","refs":[{"value":"2024-4574","label":"2024-4574","link":"https:\/\/www.cve.org\/CVERecord?id=CVE-2024-4574"}]}],"type":{"label":"Cross Site Scripting (XSS)","slug":""},"id":"ps-18618","created_at":"2024-05-13T01:14:36+00:00","updated_at":"2024-05-13T01:14:36+00:00","published_at":"2024-05-13T01:14:23+00:00","score":6.5,"score_group":"","score_vector":"","is_exploited":false,"patched_in_ranges":[],"patch_priority":1}