Lucene search
HistoryMay 15, 2024 - 6:15 a.m.
CVE-2024-3822
wordpress
plugin
vulnerability
base64 encoder/decoder
version 0.9.2
reflected cross-site scripting
high privilege users
The Base64 Encoder/Decoder WordPress plugin through 0.9.2 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
Related
cvelist
cvelist
CVE-2024-3822 Base64 Encoder/Decoder <= 0.9.2 - Reflected XSS
2024-05-15 06:00:04
cve
cve
CVE-2024-3822
2024-05-15 06:15:14
wpexploit
wpexploit
Base64 Encoder/Decoder <= 0.9.2 - Reflected XSS
2024-04-24 00:00:00
wpvulndb
wpvulndb
Base64 Encoder/Decoder <= 0.9.2 - Reflected XSS
2024-04-24 00:00:00
nuclei
nuclei
Base64 Encoder/Decoder <= 0.9.2 - Cross-Site Scripting
2024-06-01 05:59:10
wordfence
wordfence