Rocket Lazy Load
Monthly
Stored cross-site scripting in the WP Media Rocket Lazy Load WordPress plugin (versions through 2.4.0) allows an authenticated low-privileged user to inject persistent JavaScript that executes in the browser of any visitor, including administrators, who later views the affected page. The issue is rated CVSS 6.5 (medium) with mandatory victim interaction and a changed scope; no public exploit code or confirmed active exploitation was identified in the available intelligence at time of analysis.
Stored cross-site scripting in the WP Media Rocket Lazy Load WordPress plugin (versions through 2.4.0) allows an authenticated low-privileged user to inject persistent JavaScript that executes in the browser of any visitor, including administrators, who later views the affected page. The issue is rated CVSS 6.5 (medium) with mandatory victim interaction and a changed scope; no public exploit code or confirmed active exploitation was identified in the available intelligence at time of analysis.