WordPress Animated AL List plugin <= 1.0.6 - Reflected XSS vulnerability

Reflected XSS vulnerability discovered by Bob Matyas in WordPress Plugin Animated AL List versions = 1.0.6...

WordPress Animated AL List Plugin <= 1.0.6 is vulnerable to Cross Site Scripting (XSS)

Software Animated AL List Type Plugin Vulnerable versions = 1.0.6 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-5728 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 61cefdad5337 Credits Bob Matyas Required...

CVE-2024-5728 Animated AL List <= 1.0.6 - Reflected XSS

The Animated AL List WordPress plugin through 1.0.6 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-5728

CVE-2024-5728 affects the Animated AL List WordPress plugin up to version 1.0.6. The vulnerability is a Reflected Cross-Site Scripting (XSS) caused by the plugin not sanitising and escaping an input parameter before echoing it back in the page. This could be exploited against high-privilege users...

PT-2024-37104 · WordPress · Animated Al List Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: Animated AL List WordPress plugin versions 1.0.0 through 1.0.6 Description: The issue is related to a Reflected Cross-Site Scripting problem. It occurs because a parameter is not properly sanitised and escaped before being outputted back in t...

Animated AL List <= 1.0.6 - Reflected XSS

Description The plugin does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin PoC 1. Add a new project 2. Access the URL...