{"metadata": {"vulnerability": "cve-2024-12494", "count": 16, "kinds": {"milestone": 4, "sighting": 3, "kev": 0, "other": 9}}, "data": [{"timestamp": "2024-12-11T12:57:53.525Z", "date_only": false, "value": "2024-12-11T12:57:53.525Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2024-12494", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-01-23T21:18:19Z", "date_only": false, "value": "2025-01-23T21:18:19.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / Wordfence", "record": "cve-2024-12494", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2025-01-24T09:21:51.989Z", "date_only": false, "value": "2025-01-24T09:21:51.989Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2024-12494", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-01-24T09:27:38.730Z", "date_only": false, "value": "2025-01-24T09:27:38.730273Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/113882618809076162", "record": "CVE-2024-12494", "field": "creation_timestamp", "uuid": "fec6d8ac-7639-4a9a-af82-e09d80a1a6eb", "url": "https://infosec.exchange/users/cve/statuses/113882618809076162"}, {"timestamp": "2025-01-24T10:03:59Z", "date_only": false, "value": "2025-01-24T10:03:59.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2886", "record": "CVE-2024-12494", "field": "creation_timestamp", "uuid": "4260d343-a3f4-4dd3-b7ea-c5d3dd265458", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12494\n\ud83d\udd39 Description: The BMLT Meeting Map plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'bmlt_meeting_map' shortcode in all versions up to, and including, 2.6.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-24T09:21:51.989Z\n\ud83d\udccf Modified: 2025-01-24T09:21:51.989Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/73c01967-262c-48ab-a464-401b1cadd4be?source=cve\n2. https://plugins.trac.wordpress.org/browser/bmlt-meeting-map/tags/2.6.0/meeting_map.php#L33\n3. https://plugins.trac.wordpress.org/browser/bmlt-meeting-map/tags/2.6.0/meeting_map.php#L462", "url": "https://t.me/DarkWebInformer_CVEAlerts/2886"}, {"timestamp": "2025-01-24T10:15:07Z", "date_only": false, "value": "2025-01-24T10:15:07Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-2PX3-M69V-2QF4", "record": "GHSA-2PX3-M69V-2QF4", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-01-24T10:15:07.457Z", "date_only": false, "value": "2025-01-24T10:15:07.457", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-12494", "record": "FKIE_CVE-2024-12494", "field": "published"}, {"timestamp": "2025-01-24T11:53:36Z", "date_only": false, "value": "2025-01-24T11:53:36.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/16256", "record": "CVE-2024-12494", "field": "creation_timestamp", "uuid": "22b1506d-1a1c-494c-b8ef-8a6e46f04030", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12494 - \"WordPress BMLT Meeting Map Stored Cross-Site Scripting Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12494 \nPublished : Jan. 24, 2025, 10:15 a.m. | 27\u00a0minutes ago \nDescription : The BMLT Meeting Map plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'bmlt_meeting_map' shortcode in all versions up to, and including, 2.6.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/16256"}, {"timestamp": "2025-01-24T12:31:06Z", "date_only": false, "value": "2025-01-24T12:31:06Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-2PX3-M69V-2QF4", "record": "GHSA-2PX3-M69V-2QF4", "field": "published"}, {"timestamp": "2025-01-24T12:31:06Z", "date_only": false, "value": "2025-01-24T12:31:06Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-2PX3-M69V-2QF4", "record": "GHSA-2PX3-M69V-2QF4", "field": "modified"}, {"timestamp": "2025-01-24T14:42:20.341Z", "date_only": false, "value": "2025-01-24T14:42:20.341449Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-12494", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-01-24T14:42:20.341Z", "date_only": false, "value": "2025-01-24T14:42:20.341449Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-12494", "record": "FKIE_CVE-2024-12494", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-02-12T17:14:33.264Z", "date_only": false, "value": "2025-02-12T17:14:33.264Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-12494", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-04-08T17:00:59.731Z", "date_only": false, "value": "2026-04-08T17:00:59.731Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2024-12494", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-04-08T17:00:59.731Z", "date_only": false, "value": "2026-04-08T17:00:59.731Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Wordfence", "record": "cve-2024-12494", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T06:59:49.820Z", "date_only": false, "value": "2026-06-17T06:59:49.820", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-12494", "record": "FKIE_CVE-2024-12494", "field": "lastModified"}]}