WordPress Animated AL List plugin <= 1.0.6 - Reflected XSS vulnerability

Reflected XSS vulnerability discovered by Bob Matyas in WordPress Plugin Animated AL List versions = 1.0.6...

WordPress Animated AL List Plugin <= 1.0.6 is vulnerable to Cross Site Scripting (XSS)

Software Animated AL List Type Plugin Vulnerable versions = 1.0.6 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-5728 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 61cefdad5337 Credits Bob Matyas Required...

CVE-2024-5728

The Animated AL List WordPress plugin, affecting versions through 1.0.6 , is vulnerable to Reflected Cross-Site Scripting (XSS) . The issue arises because the plugin fails to sanitize and escape a parameter before outputting it back to the page. This vulnerability could be targeted against high-p...

CVE-2024-5728 Animated AL List <= 1.0.6 - Reflected XSS

The Animated AL List WordPress plugin through 1.0.6 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

PT-2024-37104 · WordPress · Animated Al List Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: Animated AL List WordPress plugin versions 1.0.0 through 1.0.6 Description: The issue is related to a Reflected Cross-Site Scripting problem. It occurs because a parameter is not properly sanitised and escaped before being outputted back in t...

CVE-2024-5728: Improper Neutralization of Input During Web Page Generation

The Animated AL List WordPress plugin through 1.0.6 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

Animated AL List <= 1.0.6 - Reflected XSS

Description The plugin does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin PoC 1. Add a new project 2. Access the URL...