WP Admin UI Customize, CVE-2024-53278

CVE, Research URL: CVE-2024-53278
Home page URL: Security reports for WP Admin UI Customize
Application: WP Admin UI Customize
Published on: Nov 26, 2024
Research Description: Cross-site scripting vulnerability exists in WP Admin UI Customize versions prior to ver 1.5.14. If a malicious admin user customizes the admin screen with some malicious contents, an arbitrary script may be executed on the web browser of the other users who are accessing the admin screen.
Affected versions: Min -, max 1.5.14.
Status: vulnerable