Threat Entry Updated 2024-09-26

CVE-2024-8622 - Amcharts Charts And Maps Plugin

The amCharts: Charts and Maps plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'amcharts_javascript' parameter in all versions up to, and including, 1.4.4 due to the ability to supply arbitrary JavaScript a lack of nonce validation on the preview functionality. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.

PLUGIN Amcharts Charts And Maps

CVE-2024-8622

MEDIUM CVSS 6.1 2024-09-12

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2024-11-21

CVE-2022-36405 - amCharts: Charts and Maps (WordPress plugin)

Authenticated (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in amCharts: Charts and Maps plugin

PLUGIN amCharts: Charts and Maps (WordPress plugin)

CVE-2022-36405

MEDIUM CVSS 5.4 2022-08-23

Risk Score

Open Full Technical Breakdown