cleantalk
Vulnerabilities and Security Researches

Stylish Price List – Price Table Builder & QR Code Restaurant Menu, CVE-2024-7758

CVE, Research URL

CVE-2024-7758

Published on
May 16, 2025
Research Description
The Stylish Price List WordPress plugin before 7.1.8 does not sanitise and escape some of its settings, which could allow high privilege users of contributor and above to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
Affected versions
Min -, max 7.1.8.
Status
vulnerable