Vulners
Lucene search
3 matches found
CVE-2024-3920
The Flattr WordPress plugin through 1.2.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
3.5CVSS7.8AI score0.00186EPSS
Exploits2References1
CVE-2024-3920
The Flattr WordPress plugin through 1.2.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
3.5CVSS5.8AI score
Exploits0References1
CVE-2024-3920
The CVE-2024-3920 entry covers the Flattr WordPress plugin (versions
3.5CVSS3.7AI score0.00186EPSS
Exploits2References1Affected Software1
20