Advanced Custom Fields
Approved changes feed: RSS · Atom
cpe:2.3:a:wpengine:advanced_custom_fields:*:*:*:*:*:wordpress:*:*
part: a version: * update: *
| Vendor | Wpengine (e497888d-6961-5f9a-82ea-2da6d8712318) |
|---|---|
| Product | Advanced Custom Fields (c47ed645-f213-588f-a460-05d90317cae9) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | wordpress |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-45429 |
vulnerable | 2026-06-08 06:48:06.209140 |
Details available
Cross-site scripting vulnerability exists in Advanced Custom Fields versions 6.3.5 and earlier and Advanced Custom Fields Pro versions 6.3.5 and earlier. If an attacker with the 'capability' setting privilege which is set in the product settings stores an arbitrary script in the field label, the script may be executed on the web browser of the logged-in user with the same privilege as the attacker's.
Published: 2024-09-04T23:07:58.383Z
Updated: 2025-03-25T15:47:51.771Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.