PT-2024-25561 · Codebard · Patron Button/Widgets For Patreon

🗓️ 03 May 2024 00:00:00Reported by Positive TechnologiesType

CodeBard's Patron Button and Widgets for Patreon have reflected XSS in page generation; affected versions n/a through 2.2.0; update beyond 2.2.0.

Reporter	Title	Published	Views	Family All 11
CNNVD	WordPress plugin CodeBard s Patron Button and Widgets for Patreon 跨站脚本漏洞	3 May 202400:00	–	cnnvd
CVE	CVE-2024-33928	3 May 202407:10	–	cve
Cvelist	CVE-2024-33928 WordPress CodeBard's Patron Button and Widgets for Patreon plugin <= 2.2.0 - Reflected Cross Site Scripting (XSS) vulnerability	3 May 202407:10	–	cvelist
EUVD	EUVD-2024-34509	3 Oct 202520:07	–	euvd
NVD	CVE-2024-33928	3 May 202407:15	–	nvd
Patchstack	WordPress CodeBard's Patron Button and Widgets for Patreon plugin <= 2.2.0 - Reflected Cross Site Scripting (XSS) vulnerability	29 Apr 202416:06	–	patchstack
Patchstack	WordPress CodeBard's Patron Button and Widgets for Patreon Plugin <= 2.2.0 is vulnerable to Cross Site Scripting (XSS)	29 Apr 202400:00	–	patchstack
RedhatCVE	CVE-2024-33928	5 Feb 202502:42	–	redhatcve
Vulnrichment	CVE-2024-33928 WordPress CodeBard's Patron Button and Widgets for Patreon plugin <= 2.2.0 - Reflected Cross Site Scripting (XSS) vulnerability	3 May 202407:10	–	vulnrichment
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (April 29, 2024 to May 5, 2024)	9 May 202416:49	–	wordfence

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-33928
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
t	www.t.me/cvenotify/78981
patchstack	www.patchstack.com/database/vulnerability/patron-button-and-widgets-by-codebard/wordpress-codebard-s-patron-button-and-widgets-for-patreon-plugin-2-2-0-reflected-cross-site-scripting-xss-vulnerability
twitter	www.twitter.com/CVEnew/status/1786408532163678423

03 May 2024 00:00Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.16.1 - 7.1

EPSS0.00175

SSVC