Lucene search

K
nvd[email protected]NVD:CVE-2024-1849
HistoryApr 15, 2024 - 5:15 a.m.

CVE-2024-1849

2024-04-1505:15:15
web.nvd.nist.gov
wp customer reviews
wordpress plugin
validation
parameter
contributor
malicious url

6.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

The WP Customer Reviews WordPress plugin before 3.7.1 does not validate a parameter allowing contributor and above users to redirect a page to a malicious URL

6.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%