Lucene search

K
nvd[email protected]NVD:CVE-2024-3917
HistoryMay 23, 2024 - 6:15 a.m.

CVE-2024-3917

2024-05-2306:15:10
web.nvd.nist.gov
nvd
cve-2024-3917
wordpress
plugin
xss
vulnerability
cross-site scripting
high privilege users
admin

8.6 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

The Pet Manager WordPress plugin through 1.4 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin

8.6 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%