CVE-2024-0700

CVE-2024-0700 describes a Stored Cross-Site Scripting (XSS) vulnerability in the Simple Tweet WordPress plugin, affecting all versions up to 1.4.0.2. This flaw, stemming from insufficient input sanitization, allows authenticated attackers with author-level access or higher to inject malicious web scripts into pages. When a user views an affected page, these scripts will execute, potentially leading to information disclosure or unauthorized actions. The vulnerability has a CVSS score of 5.4 (Medium), indicating a low attack complexity and requiring user interaction, but with potential for partial impact on confidentiality and integrity. Despite its medium severity, there is currently no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit or Nuclei, or entries in ExploitDB. Community discussion and media coverage for CVE-2024-0700 are minimal, with zero mentions across social media and news articles, suggesting a low level of public awareness and attention. The EPSS score is also very low, further indicating a low probability of exploitation in the wild.