Medium 6.4
2024-12-12< 0.4.0
CVE-2024-11384
Minimum safe version
0.4.0
Update to 0.4.0 or later to address 1 fixable vulnerability
CVE-2024-11384
Arena.IM – Live Blogging for real-time events <= 0.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via arena_embed_amp Shortcode
Arena.IM – Live Blogging for real-time events <= 0.4.1 - Cross-Site Request Forgery to Settings Update