Lucene search

K
nvd[email protected]NVD:CVE-2024-1956
HistoryApr 08, 2024 - 5:15 a.m.

CVE-2024-1956

2024-04-0805:15:07
web.nvd.nist.gov
wordpress plugin
cross-site scripting
cve-2024-1956
unauthenticated request
vulnerability

AI Score

6

Confidence

High

EPSS

0

Percentile

9.0%

The wpb-show-core WordPress plugin before 2.7 does not sanitise and escape the parameters before outputting it back in the response of an unauthenticated request, leading to a Reflected Cross-Site Scripting

AI Score

6

Confidence

High

EPSS

0

Percentile

9.0%