Unrated severityNVD Advisory· Published Jun 14, 2024· Updated Mar 25, 2025
Amen <= 3.3.1 - Admin+ Stored XSS
CVE-2024-3992
Description
The Amen WordPress plugin through 3.3.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
5- WordPress/Amendescription
- osv-coords2 versions
< 3.3.2+ 1 more
- (no CPE)range: < 3.3.2
- (no CPE)range: < 3.3.2
Patches
Vulnerability mechanics
References
1- wpscan.com/vulnerability/e9fe3101-8033-4eee-8b37-06856872e9ef/mitreexploitvdb-entrytechnical-description
News mentions
0No linked articles in our index yet.