Vulnerability Details CVE-2024-12273
The Calculated Fields Form WordPress plugin before 5.2.62 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 5.3%
CVSS Severity
CVSS v3 Score 3.5
Products affected by CVE-2024-12273
-
cpe:2.3:a:codepeople:calculated_fields_form:1.0.346
-
cpe:2.3:a:codepeople:calculated_fields_form:1.0.347
-
cpe:2.3:a:codepeople:calculated_fields_form:1.0.348
-
cpe:2.3:a:codepeople:calculated_fields_form:1.0.349
-
cpe:2.3:a:codepeople:calculated_fields_form:1.0.350
-
cpe:2.3:a:codepeople:calculated_fields_form:1.0.351
-
cpe:2.3:a:codepeople:calculated_fields_form:1.0.352
-
cpe:2.3:a:codepeople:calculated_fields_form:1.0.353
-
cpe:2.3:a:codepeople:calculated_fields_form:1.0.354
-
cpe:2.3:a:codepeople:calculated_fields_form:1.0.355
-
cpe:2.3:a:codepeople:calculated_fields_form:1.1.119
-
cpe:2.3:a:codepeople:calculated_fields_form:1.1.120
-
cpe:2.3:a:codepeople:calculated_fields_form:1.1.121
-
cpe:2.3:a:codepeople:calculated_fields_form:1.1.122
-
cpe:2.3:a:codepeople:calculated_fields_form:1.1.123
-
cpe:2.3:a:codepeople:calculated_fields_form:1.1.124
-
cpe:2.3:a:codepeople:calculated_fields_form:1.1.125
-
cpe:2.3:a:codepeople:calculated_fields_form:1.1.126
-
cpe:2.3:a:codepeople:calculated_fields_form:1.1.127
-
cpe:2.3:a:codepeople:calculated_fields_form:1.1.128
-
cpe:2.3:a:codepeople:calculated_fields_form:1.1.129
-
cpe:2.3:a:codepeople:calculated_fields_form:1.1.130
-
cpe:2.3:a:codepeople:calculated_fields_form:1.1.131
-
cpe:2.3:a:codepeople:calculated_fields_form:1.1.132
-
cpe:2.3:a:codepeople:calculated_fields_form:1.1.133
-
cpe:2.3:a:codepeople:calculated_fields_form:1.1.134
-
cpe:2.3:a:codepeople:calculated_fields_form:1.1.135
-
cpe:2.3:a:codepeople:calculated_fields_form:1.1.136
-
cpe:2.3:a:codepeople:calculated_fields_form:1.1.137
-
cpe:2.3:a:codepeople:calculated_fields_form:1.1.138
-
cpe:2.3:a:codepeople:calculated_fields_form:1.1.139
-
cpe:2.3:a:codepeople:calculated_fields_form:1.1.140
-
cpe:2.3:a:codepeople:calculated_fields_form:1.1.141
-
cpe:2.3:a:codepeople:calculated_fields_form:1.1.142
-
cpe:2.3:a:codepeople:calculated_fields_form:1.1.143
-
cpe:2.3:a:codepeople:calculated_fields_form:1.1.144
-
cpe:2.3:a:codepeople:calculated_fields_form:1.1.145
-
cpe:2.3:a:codepeople:calculated_fields_form:1.1.146
-
cpe:2.3:a:codepeople:calculated_fields_form:1.1.147
-
cpe:2.3:a:codepeople:calculated_fields_form:1.1.148
-
cpe:2.3:a:codepeople:calculated_fields_form:1.1.149
-
cpe:2.3:a:codepeople:calculated_fields_form:1.1.150
-
cpe:2.3:a:codepeople:calculated_fields_form:1.1.151
-
cpe:2.3:a:codepeople:calculated_fields_form:1.1.152
-
cpe:2.3:a:codepeople:calculated_fields_form:1.1.153
-
cpe:2.3:a:codepeople:calculated_fields_form:1.1.154
-
cpe:2.3:a:codepeople:calculated_fields_form:1.1.155
-
cpe:2.3:a:codepeople:calculated_fields_form:1.1.156
-
cpe:2.3:a:codepeople:calculated_fields_form:1.1.157
-
cpe:2.3:a:codepeople:calculated_fields_form:1.1.158
-
cpe:2.3:a:codepeople:calculated_fields_form:1.1.159
-
cpe:2.3:a:codepeople:calculated_fields_form:1.1.160
-
cpe:2.3:a:codepeople:calculated_fields_form:1.1.161
-
cpe:2.3:a:codepeople:calculated_fields_form:1.1.162
-
cpe:2.3:a:codepeople:calculated_fields_form:1.1.163
-
cpe:2.3:a:codepeople:calculated_fields_form:1.2.0
-
cpe:2.3:a:codepeople:calculated_fields_form:1.2.1
-
cpe:2.3:a:codepeople:calculated_fields_form:1.2.10
-
cpe:2.3:a:codepeople:calculated_fields_form:1.2.11
-
cpe:2.3:a:codepeople:calculated_fields_form:1.2.12
-
cpe:2.3:a:codepeople:calculated_fields_form:1.2.13
-
cpe:2.3:a:codepeople:calculated_fields_form:1.2.14
-
cpe:2.3:a:codepeople:calculated_fields_form:1.2.15
-
cpe:2.3:a:codepeople:calculated_fields_form:1.2.16
-
cpe:2.3:a:codepeople:calculated_fields_form:1.2.17
-
cpe:2.3:a:codepeople:calculated_fields_form:1.2.18
-
cpe:2.3:a:codepeople:calculated_fields_form:1.2.19
-
cpe:2.3:a:codepeople:calculated_fields_form:1.2.2
-
cpe:2.3:a:codepeople:calculated_fields_form:1.2.20
-
cpe:2.3:a:codepeople:calculated_fields_form:1.2.21
-
cpe:2.3:a:codepeople:calculated_fields_form:1.2.22
-
cpe:2.3:a:codepeople:calculated_fields_form:1.2.23
-
cpe:2.3:a:codepeople:calculated_fields_form:1.2.24
-
cpe:2.3:a:codepeople:calculated_fields_form:1.2.25
-
cpe:2.3:a:codepeople:calculated_fields_form:1.2.26
-
cpe:2.3:a:codepeople:calculated_fields_form:1.2.27
-
cpe:2.3:a:codepeople:calculated_fields_form:1.2.28
-
cpe:2.3:a:codepeople:calculated_fields_form:1.2.29
-
cpe:2.3:a:codepeople:calculated_fields_form:1.2.3
-
cpe:2.3:a:codepeople:calculated_fields_form:1.2.30
-
cpe:2.3:a:codepeople:calculated_fields_form:1.2.31
-
cpe:2.3:a:codepeople:calculated_fields_form:1.2.32
-
cpe:2.3:a:codepeople:calculated_fields_form:1.2.33
-
cpe:2.3:a:codepeople:calculated_fields_form:1.2.34
-
cpe:2.3:a:codepeople:calculated_fields_form:1.2.35
-
cpe:2.3:a:codepeople:calculated_fields_form:1.2.36
-
cpe:2.3:a:codepeople:calculated_fields_form:1.2.37
-
cpe:2.3:a:codepeople:calculated_fields_form:1.2.38
-
cpe:2.3:a:codepeople:calculated_fields_form:1.2.39
-
cpe:2.3:a:codepeople:calculated_fields_form:1.2.4
-
cpe:2.3:a:codepeople:calculated_fields_form:1.2.40
-
cpe:2.3:a:codepeople:calculated_fields_form:1.2.41
-
cpe:2.3:a:codepeople:calculated_fields_form:1.2.42
-
cpe:2.3:a:codepeople:calculated_fields_form:1.2.43
-
cpe:2.3:a:codepeople:calculated_fields_form:1.2.44
-
cpe:2.3:a:codepeople:calculated_fields_form:1.2.45
-
cpe:2.3:a:codepeople:calculated_fields_form:1.2.46
-
cpe:2.3:a:codepeople:calculated_fields_form:1.2.47
-
cpe:2.3:a:codepeople:calculated_fields_form:1.2.48
-
cpe:2.3:a:codepeople:calculated_fields_form:1.2.49
-
cpe:2.3:a:codepeople:calculated_fields_form:1.2.5
-
cpe:2.3:a:codepeople:calculated_fields_form:1.2.50
-
cpe:2.3:a:codepeople:calculated_fields_form:1.2.52
-
cpe:2.3:a:codepeople:calculated_fields_form:1.2.53
-
cpe:2.3:a:codepeople:calculated_fields_form:1.2.54
-
cpe:2.3:a:codepeople:calculated_fields_form:1.2.55
-
cpe:2.3:a:codepeople:calculated_fields_form:1.2.56
-
cpe:2.3:a:codepeople:calculated_fields_form:1.2.57
-
cpe:2.3:a:codepeople:calculated_fields_form:1.2.6
-
cpe:2.3:a:codepeople:calculated_fields_form:1.2.7
-
cpe:2.3:a:codepeople:calculated_fields_form:1.2.9
-
cpe:2.3:a:codepeople:calculated_fields_form:5.1.58
-
cpe:2.3:a:codepeople:calculated_fields_form:5.1.59
-
cpe:2.3:a:codepeople:calculated_fields_form:5.1.60
-
cpe:2.3:a:codepeople:calculated_fields_form:5.1.61
-
cpe:2.3:a:codepeople:calculated_fields_form:5.1.62
-
cpe:2.3:a:codepeople:calculated_fields_form:5.1.63
-
cpe:2.3:a:codepeople:calculated_fields_form:5.1.64
-
cpe:2.3:a:codepeople:calculated_fields_form:5.1.65
-
cpe:2.3:a:codepeople:calculated_fields_form:5.2.0
-
cpe:2.3:a:codepeople:calculated_fields_form:5.2.1
-
cpe:2.3:a:codepeople:calculated_fields_form:5.2.10
-
cpe:2.3:a:codepeople:calculated_fields_form:5.2.11
-
cpe:2.3:a:codepeople:calculated_fields_form:5.2.12
-
cpe:2.3:a:codepeople:calculated_fields_form:5.2.13
-
cpe:2.3:a:codepeople:calculated_fields_form:5.2.14
-
cpe:2.3:a:codepeople:calculated_fields_form:5.2.15
-
cpe:2.3:a:codepeople:calculated_fields_form:5.2.16
-
cpe:2.3:a:codepeople:calculated_fields_form:5.2.17
-
cpe:2.3:a:codepeople:calculated_fields_form:5.2.18
-
cpe:2.3:a:codepeople:calculated_fields_form:5.2.19
-
cpe:2.3:a:codepeople:calculated_fields_form:5.2.2
-
cpe:2.3:a:codepeople:calculated_fields_form:5.2.20
-
cpe:2.3:a:codepeople:calculated_fields_form:5.2.21
-
cpe:2.3:a:codepeople:calculated_fields_form:5.2.22
-
cpe:2.3:a:codepeople:calculated_fields_form:5.2.23
-
cpe:2.3:a:codepeople:calculated_fields_form:5.2.24
-
cpe:2.3:a:codepeople:calculated_fields_form:5.2.25
-
cpe:2.3:a:codepeople:calculated_fields_form:5.2.26
-
cpe:2.3:a:codepeople:calculated_fields_form:5.2.27
-
cpe:2.3:a:codepeople:calculated_fields_form:5.2.28
-
cpe:2.3:a:codepeople:calculated_fields_form:5.2.29
-
cpe:2.3:a:codepeople:calculated_fields_form:5.2.3
-
cpe:2.3:a:codepeople:calculated_fields_form:5.2.30
-
cpe:2.3:a:codepeople:calculated_fields_form:5.2.31
-
cpe:2.3:a:codepeople:calculated_fields_form:5.2.32
-
cpe:2.3:a:codepeople:calculated_fields_form:5.2.33
-
cpe:2.3:a:codepeople:calculated_fields_form:5.2.34
-
cpe:2.3:a:codepeople:calculated_fields_form:5.2.35
-
cpe:2.3:a:codepeople:calculated_fields_form:5.2.36
-
cpe:2.3:a:codepeople:calculated_fields_form:5.2.37
-
cpe:2.3:a:codepeople:calculated_fields_form:5.2.38
-
cpe:2.3:a:codepeople:calculated_fields_form:5.2.39
-
cpe:2.3:a:codepeople:calculated_fields_form:5.2.4
-
cpe:2.3:a:codepeople:calculated_fields_form:5.2.40
-
cpe:2.3:a:codepeople:calculated_fields_form:5.2.41
-
cpe:2.3:a:codepeople:calculated_fields_form:5.2.42
-
cpe:2.3:a:codepeople:calculated_fields_form:5.2.43
-
cpe:2.3:a:codepeople:calculated_fields_form:5.2.44
-
cpe:2.3:a:codepeople:calculated_fields_form:5.2.45
-
cpe:2.3:a:codepeople:calculated_fields_form:5.2.46
-
cpe:2.3:a:codepeople:calculated_fields_form:5.2.47
-
cpe:2.3:a:codepeople:calculated_fields_form:5.2.48
-
cpe:2.3:a:codepeople:calculated_fields_form:5.2.49
-
cpe:2.3:a:codepeople:calculated_fields_form:5.2.5
-
cpe:2.3:a:codepeople:calculated_fields_form:5.2.50
-
cpe:2.3:a:codepeople:calculated_fields_form:5.2.51
-
cpe:2.3:a:codepeople:calculated_fields_form:5.2.52
-
cpe:2.3:a:codepeople:calculated_fields_form:5.2.53
-
cpe:2.3:a:codepeople:calculated_fields_form:5.2.54
-
cpe:2.3:a:codepeople:calculated_fields_form:5.2.55
-
cpe:2.3:a:codepeople:calculated_fields_form:5.2.56
-
cpe:2.3:a:codepeople:calculated_fields_form:5.2.57
-
cpe:2.3:a:codepeople:calculated_fields_form:5.2.58
-
cpe:2.3:a:codepeople:calculated_fields_form:5.2.59
-
cpe:2.3:a:codepeople:calculated_fields_form:5.2.6
-
cpe:2.3:a:codepeople:calculated_fields_form:5.2.60
-
cpe:2.3:a:codepeople:calculated_fields_form:5.2.61
-
cpe:2.3:a:codepeople:calculated_fields_form:5.2.7
-
cpe:2.3:a:codepeople:calculated_fields_form:5.2.8
-
cpe:2.3:a:codepeople:calculated_fields_form:5.2.9