Lucene search

K
nvd[email protected]NVD:CVE-2024-1487
HistoryMar 11, 2024 - 6:15 p.m.

CVE-2024-1487

2024-03-1118:15:18
web.nvd.nist.gov
1
cve-2024-1487
photos and files contest gallery
cross-site scripting

AI Score

5.8

Confidence

High

EPSS

0

Percentile

9.0%

The Photos and Files Contest Gallery WordPress plugin before 21.3.1 does not sanitize and escape some parameters, which could allow users with a role as low as author to perform Cross-Site Scripting attacks.

AI Score

5.8

Confidence

High

EPSS

0

Percentile

9.0%