Web Stories (Google) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 92 known versions, newest CVE from 2024-12-13. Vendor: Google.

CVEs of Web Stories

• CVE-2024-54317 - CVSS 6.5 (medium), 2024-12-13: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Google Web Stories web-stories allows Stored XSS.This…
• CVE-2023-1979 - CVSS 6.5 (medium), 2023-05-08: The Web Stories for WordPress plugin supports the WordPress built-in functionality of protecting content with a password. The content is then only accessible…
• CVE-2022-3708 - CVSS 9.6 (critical), 2022-10-28: The Web Stories plugin for WordPress is vulnerable to Server-Side Request Forgery in versions up to, and including 1.24.0 due to insufficient validation of…