3817 matches found
CVE-2024-13633
CVE-2024-13633 concerns the WordPress plugin Simple Catalogue (versions up to 1.0.2). The issue is a Reflected XSS caused by the plugin not sanitising or escaping a parameter before outputting it on the page, which could enable an attacker to leverage admin or high-privilege sessions. The connect...
CVE-2024-13632 WP Extra Fields <= 1.0.1 - Reflected XSS
The WP Extra Fields WordPress plugin through 1.0.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...
CVE-2024-13632
CVE-2024-13632 affects the WP Extra Fields WordPress plugin (≤1.0.1). The vulnerability is a Reflected Cross‑Site Scripting caused by insufficient sanitisation/escaping of a parameter before output, potentially affecting high-privilege users (e.g., admin). The CVSSv3.1 base score is 7.1 (HIGH) wi...
CVE-2024-13632 WP Extra Fields <= 1.0.1 - Reflected XSS
The WP Extra Fields WordPress plugin through 1.0.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...
CVE-2024-13631 OM Stripe <= 02.00.00 - Reflected XSS
The Om Stripe WordPress plugin through 02.00.00 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...
CVE-2024-13631 OM Stripe <= 02.00.00 - Reflected XSS
The Om Stripe WordPress plugin through 02.00.00 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...
CVE-2024-13628 WP Pricing Table <= 1.1 - Reflected XSS
The WP Pricing Table WordPress plugin through 1.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...
CVE-2024-13628
CVE-2024-13628 concerns the WP Pricing Table WordPress plugin, affected up to version 1.1. The issue is a reflected cross-site scripting (XSS) caused by outputting an unsanitized/unescaped parameter back into the page, which could be exploited against high-privilege users (e.g., admins) by crafti...
CVE-2024-13629 Pushbiz <= 1.0 - Reflected XSS
The pushBIZ WordPress plugin through 1.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...
CVE-2024-13628 WP Pricing Table <= 1.1 - Reflected XSS
The WP Pricing Table WordPress plugin through 1.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...
CVE-2024-13629 Pushbiz <= 1.0 - Reflected XSS
The pushBIZ WordPress plugin through 1.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...
CVE-2024-13629
CVE-2024-13629 flags a Reflected Cross-Site Scripting in the pushBIZ WordPress plugin (versions <= 1.0). The issue arises from insufficient sanitization/escaping of a parameter before echoing it on the page, potentially impacting admin users or other high-privilege roles. Reported base metrics...
CVE-2024-13630 News List <= 1.0 - Reflected XSS
The NewsTicker WordPress plugin through 1.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...
CVE-2024-13630 News List <= 1.0 - Reflected XSS
The NewsTicker WordPress plugin through 1.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...
CVE-2024-13630
CVE-2024-13630 concerns the NewsTicker WordPress plugin (versions up to 1.0). The description in the initial document states that a parameter is not sanitised or escaped before being output to the page, enabling a Reflected Cross-Site Scripting that could affect high-privilege users (e.g., admins...
CVE-2024-13624
CVE-2024-13624 affects the WordPress plugin WPMovieLibrary up to version 2.1.4.8. The vulnerability is a reflected Cross‑Site Scripting where the plugin does not properly sanitize/escape the affected parameter (notably the import page’s parameter, e.g., order), allowing an attacker to execute arb...
CVE-2024-13624 WPMovieLibrary <= 2.1.4.8 - Reflected XSS
The WPMovieLibrary WordPress plugin through 2.1.4.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...
CVE-2024-13624 WPMovieLibrary <= 2.1.4.8 - Reflected XSS
The WPMovieLibrary WordPress plugin through 2.1.4.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...
CVE-2024-13571
CVE-2024-13571 affects the Post Timeline WordPress plugin prior to version 2.3.10. The issue is a Reflected Cross-Site Scripting (XSS) caused by insufficient sanitization/escaping of a parameter before it is output on the page, which could be exploited against high-privilege users (e.g., admins)....
CVE-2024-13571 Post Timeline < 2.3.10 - Reflected XSS
The Post Timeline WordPress plugin before 2.3.10 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...