Medium severity5.9NVD Advisory· Published Jul 30, 2024· Updated Jun 17, 2026

CVE-2024-4096

Description

The Responsive Tabs WordPress plugin through 4.0.8 does not sanitise and escape some of its Tab settings, which could allow high privilege users such as Contributors and above to perform Stored Cross-Site Scripting attacks

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Responsive Tabsllm-fuzzy2 versions
<=4.0.8+ 1 more
- (no CPE)range: <=4.0.8
- (no CPE)
Package: https://wordpress.org/plugins/responsive-tabs
Wpdarko/Responsive Tabs
cpe:2.3:a:wpdarko:responsive_tabs:*:*:*:*:*:wordpress:*:*
Range: <4.0.11

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/4dba5e9e-24be-458a-9150-7c7a958e66cb/nvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.384
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000