CVE-2024-7485

The Traffic Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'page' parameter in the 'UserWebStat' AJAX function in all versions up to, and including, 1.4.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...

CVE-2024-7485

creationtimestamp| type| source ---|---|--- 2024-08-06 04:58:06+00:00| seen| https://t.me/cvedetector/2515...

CVE-2024-7485

CVE-2024-7485 refers to the Traffic Manager WordPress plugin (

CVE-2024-7485 Traffic Manager <= 1.4.5 - Unauthenticated Stored Cross-Site Scripting

The Traffic Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'page' parameter in the 'UserWebStat' AJAX function in all versions up to, and including, 1.4.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...