Lucene search
+L

3 matches found

WPVulnDB
WPVulnDB
added 2024/05/16 12:0 a.m.18 views

Debug Info <= 1.3.10 - Authenticated (Admin+) Stored Cross-Site Scripting

Description The Debug Info plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.3.10 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level...

5.9CVSS5.9AI score0.00274EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/05/08 10:57 a.m.23 views

CVE-2024-34565 WordPress Debug Info plugin <= 1.3.10 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Debug Info allows Stored XSS.This issue affects Debug Info: from n/a through 1.3.10...

5.9CVSS6.3AI score0.00274EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2024/05/07 11:5 a.m.7 views

WordPress Debug Info plugin <= 1.3.10 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Jakick Patchstack Alliance in WordPress Plugin Debug Info versions = 1.3.10...

5.9CVSS6.1AI score0.00274EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder