CVE-2024-0187

🗓️ 16 Jan 2024 15:57:01Reported by WPScanType

cve🔗 web.nvd.nist.gov👁 37 Views🌐 WEB

The Community by PeepSo WordPress plugin before 6.3.1.2 does not sanitise and escape various parameters and generated URLs before outputting them back attributes, leading to a Reflected Cross-Site Scriptin

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2024-0187	23 Jan 202419:17	–	circl
CNNVD	WordPress plugin Community by PeepSo Security Vulnerability	16 Jan 202400:00	–	cnnvd
Cvelist	CVE-2024-0187 Community by PeepSo < 6.3.1.2 - Reflected XSS	16 Jan 202415:57	–	cvelist
EUVD	EUVD-2024-15986	3 Oct 202520:07	–	euvd
NVD	CVE-2024-0187	16 Jan 202416:15	–	nvd
OSV	CVE-2024-0187	16 Jan 202416:15	–	osv
Patchstack	WordPress Community by PeepSo plugin < 6.3.1.2 - Reflected XSS vulnerability	30 Jan 202608:14	–	patchstack
Prion	Cross site scripting	16 Jan 202416:15	–	prion
RedhatCVE	CVE-2024-0187	23 May 202509:32	–	redhatcve
Vulnrichment	CVE-2024-0187 Community by PeepSo < 6.3.1.2 - Reflected XSS	16 Jan 202415:57	–	vulnrichment

NVD

Vulners

Node

peepso peepsoRange<6.3.1.2wordpress

[
  {
    "vendor": "Unknown",
    "product": "Community by PeepSo",
    "versions": [
      {
        "status": "affected",
        "versionType": "semver",
        "version": "0",
        "lessThan": "6.3.1.2"
      }
    ],
    "defaultStatus": "unaffected",
    "collectionURL": "https://wordpress.org/plugins"
  }
]

Source	Link
wpscan	www.wpscan.com/vulnerability/b4600411-bee1-4cc8-aee9-0a613ac9b55b/

Parameter	Position	Path	Description	CWE
page	query param	/wp-admin/admin.php?page=peepso&"><script>alert(/XSS/)</script>	Reflected XSS in PeepSo WordPress plugin due to unsanitized parameters/URLs (CVE-2024-0187, CWE-79).	CWE-79

22 May 2025 18:15Current

6Medium risk

Vulners AI Score6

CVSS 3.16.1

EPSS0.00398

SSVC

CWE-79