How severe is CVE-2024-3754?

This vulnerability has a severity rating of MEDIUM with a CVSS score of 4.7 out of 10.

What type of vulnerability is CVE-2024-3754?

This is classified as NVD-CWE-Other, which is a common weakness in software security.

CVE-2024-3754

MEDIUM Year: 2024

CVSS v3 Score

4.7

Medium

Weakness Type

NVD-CWE-Other

View all →

Vulnerability Description

The Alemha watermarker WordPress plugin through 1.3.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)

CVE-2016-0623

MEDIUM

CVSS:4.7(Medium)

Unspecified vulnerability in Oracle Sun Solaris 11.3 allows remote attackers to affect integrity via vectors related to the Automated Installer sub-component.

NVD-CWE-Other2016

CVE-2016-0642

MEDIUM

CVSS:4.7(Medium)

Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier allows local users to affect integrity and availability via vectors related to Federated.

NVD-CWE-Other2016

CVE-2016-0655

MEDIUM

CVSS:4.7(Medium)

Unspecified vulnerability in Oracle MySQL 5.6.29 and earlier and 5.7.11 and earlier and MariaDB 10.0.x before 10.0.25 and 10.1.x before 10.1.14 allows local users to affect availability via vectors re...

NVD-CWE-Other2016

CVE-2016-0661

MEDIUM

CVSS:4.7(Medium)

Unspecified vulnerability in Oracle MySQL 5.6.28 and earlier and 5.7.10 and earlier allows local users to affect availability via vectors related to Options.

NVD-CWE-Other2016