{"metadata": {"vulnerability": "CVE-2024-4061", "count": 16, "kinds": {"milestone": 4, "sighting": 2, "kev": 0, "other": 10}}, "data": [{"timestamp": "2024-04-23T12:47:49.802Z", "date_only": false, "value": "2024-04-23T12:47:49.802Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2024-4061", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-04-24T05:02:07.889Z", "date_only": false, "value": "2024-04-24T05:02:07.889826Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2024-4061", "record": "GSD-2024-4061", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-05-21T06:00:02.007Z", "date_only": false, "value": "2024-05-21T06:00:02.007Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-4061", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-05-21T06:00:02.007Z", "date_only": false, "value": "2024-05-21T06:00:02.007Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / WPScan", "record": "CVE-2024-4061", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-05-21T06:15:09Z", "date_only": false, "value": "2024-05-21T06:15:09Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-6FJ9-CQ25-9X7H", "record": "GHSA-6FJ9-CQ25-9X7H", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-05-21T06:15:09.247Z", "date_only": false, "value": "2024-05-21T06:15:09.247", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-4061", "record": "FKIE_CVE-2024-4061", "field": "published"}, {"timestamp": "2024-05-21T06:30:51Z", "date_only": false, "value": "2024-05-21T06:30:51Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-6FJ9-CQ25-9X7H", "record": "GHSA-6FJ9-CQ25-9X7H", "field": "published"}, {"timestamp": "2024-05-21T14:27:46.212Z", "date_only": false, "value": "2024-05-21T14:27:46.212926Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-4061", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2024-05-21T14:27:46.212Z", "date_only": false, "value": "2024-05-21T14:27:46.212926Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-4061", "record": "FKIE_CVE-2024-4061", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-05-24T07:56:57Z", "date_only": false, "value": "2024-05-24T07:56:57.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/openSource3/133", "record": "CVE-2024-4061", "field": "creation_timestamp", "uuid": "e87a476a-d2a7-4536-8cbf-0ad4e055ccd4", "content": "CVE ID : CVE-2024-4061\nSystem : wordpress &lt; 4.2.9\nType : Stored xss\n\nExploit :\n1. Add New Survey\n2. Choose any Templates\n3. Go to General Settings\n4. Insert the XSS payload into the fields where the question is asked: \"&gt;\n5. As a result, when you go to the site, the questionnaire in which XSS works will be displayed\n\u0627\u0644\u0627\u0633\u063a\u0644\u0627\u0644 :\n1. \u0625\u0636\u0627\u0641\u0629 \u0627\u0633\u062a\u0637\u0644\u0627\u0639 \u062c\u062f\u064a\u062f\n2. \u0627\u062e\u062a\u0631 \u0623\u064a \u0642\u0648\u0627\u0644\u0628\n3. \u0627\u0646\u062a\u0642\u0644 \u0625\u0644\u0649 \u0627\u0644\u0625\u0639\u062f\u0627\u062f\u0627\u062a \u0627\u0644\u0639\u0627\u0645\u0629\n4. \u0623\u062f\u062e\u0644 \u0628\u0627\u0644\u0648\u062f XSS \u0641\u064a \u0627\u0644\u062d\u0642\u0648\u0644 \u0627\u0644\u062a\u064a \u064a\u062a\u0645 \u0637\u0631\u062d \u0627\u0644\u0633\u0624\u0627\u0644 \u0641\u064a\u0647\u0627:\n \"&gt;\n\n5. \u0648\u0646\u062a\u064a\u062c\u0629 \u0644\u0630\u0644\u0643\u060c \u0639\u0646\u062f\u0645\u0627 \u062a\u0630\u0647\u0628 \u0625\u0644\u0649 \u0627\u0644\u0645\u0648\u0642\u0639\u060c \u0633\u064a\u062a\u0645 \u0639\u0631\u0636 \u0627\u0644\u0627\u0633\u062a\u0628\u064a\u0627\u0646 \u0627\u0644\u0630\u064a \u064a\u0639\u0645\u0644 \u0641\u064a\u0647 XSS", "url": "https://t.me/openSource3/133"}, {"timestamp": "2024-08-01T20:26:57.322Z", "date_only": false, "value": "2024-08-01T20:26:57.322Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2024-4061", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-03-28T23:17:49.657Z", "date_only": false, "value": "2025-03-28T23:17:49.657Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2024-4061", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-03-28T23:17:49.657Z", "date_only": false, "value": "2025-03-28T23:17:49.657Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-4061", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-03-28T23:29:15Z", "date_only": false, "value": "2025-03-28T23:29:15.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/9497", "record": "CVE-2024-4061", "field": "creation_timestamp", "uuid": "0f4dcd71-be51-4e7c-a596-fae05fb73504", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-4061\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Survey Maker  WordPress plugin before 4.2.9 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)\n\ud83d\udccf Published: 2024-05-21T06:00:02.007Z\n\ud83d\udccf Modified: 2025-03-28T23:17:49.657Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/175a9f3a-1f8d-44d1-8a12-e037251b025d/", "url": "https://t.me/DarkWebInformer_CVEAlerts/9497"}, {"timestamp": "2025-03-29T00:31:31Z", "date_only": false, "value": "2025-03-29T00:31:31Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-6FJ9-CQ25-9X7H", "record": "GHSA-6FJ9-CQ25-9X7H", "field": "modified"}, {"timestamp": "2026-06-17T08:01:01.640Z", "date_only": false, "value": "2026-06-17T08:01:01.640", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-4061", "record": "FKIE_CVE-2024-4061", "field": "lastModified"}]}
