Lucene search
+L

7 matches found

Nuclei
Nuclei
•added 2026/09/30 2:12 a.m.•26 views

WP DeskLite - Reflected XSS

WP DeskLite WordPress plugin through 1.0.0 contains a reflected XSS caused by unsanitized and unescaped parameter output, letting attackers execute scripts against high privilege users such as admin, exploit requires crafted request. id: CVE-2024-12724 info: name: WP DeskLite - Reflected XSS...

5.9AI score0.00573EPSS
SaveExploits1References2
NVD
NVD
•added 2025/05/15 8:15 p.m.•20 views

CVE-2024-12724

The WP DeskLite WordPress plugin through 1.0.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

6.1CVSS0.00573EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2025/05/15 8:06 p.m.•29 views

CVE-2024-12724 WP DeskLite <= 1.0.0 - Reflected XSS

The WP DeskLite WordPress plugin through 1.0.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

0.00573EPSS
SaveExploits1References1
CVE
CVE
•added 2025/05/15 8:06 p.m.•43 views

CVE-2024-12724

The WP DeskLite WordPress plugin (versions 1.0.0 and earlier ) is vulnerable to a Reflected Cross-Site Scripting (XSS) flaw. The root cause is the failure to properly sanitise and escape a parameter before it is outputted back onto the page. This vulnerability could be exploited against high-priv...

6.1AI score0.00573EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
•added 2025/05/15 12:00 a.m.•14 views

PT-2025-21432

Name of the Vulnerable Software and Affected Versions: WP DeskLite WordPress plugin versions 1.0.0 and earlier Description: The issue is related to a Reflected Cross-Site Scripting problem. It occurs because a parameter is not properly sanitised and escaped before being outputted back in the page...

6.1CVSS5.4AI score0.00573EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2025/05/15 12:00 a.m.•13 views

WordPress plugin WP DeskLite 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

6.1CVSS6AI score0.00573EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/15 12:00 a.m.•3 views

CVE-2024-12724: Improper Neutralization of Input During Web Page Generation

The WP DeskLite WordPress plugin through 1.0.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

6.1CVSS5.8AI score0.00573EPSS
SaveExploits1References1
Rows per page
Query Builder