Approved changes feed: RSS · Atom

cpe:2.3:a:happymonkeyagency:scss_happy_compiler_–_compile_scss_to_css_&_automatic_enqueue:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorHappymonkeyagency (f603f82a-d346-59c9-89cf-5c10c0fde089)
ProductScss Happy Compiler – Compile Scss To Css & Automatic Enqueue (d29468ff-8adc-5c18-96c2-1271d055c090)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-5600 vulnerable 2026-06-08 06:56:16.654458 Happy SCSS Compiler - Compile SCSS to CSS automatically <= 1.3.10 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting
MEDIUM (5.4)
The SCSS Happy Compiler – Compile SCSS to CSS & Automatic Enqueue plugin for WordPress is vulnerable to Stored Cross-Site Scripting due to a missing capability check and insufficient sanitization on the import_settings() function in all versions up to, and including, 1.3.10. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject malicious web scripts.
Published: 2024-07-09T08:33:04.702Z
Updated: 2026-04-08T16:47:37.807Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.