Lucene search
+L

27 matches found

NVD
NVD
•added 2024/12/13 12:15 p.m.•42 views

CVE-2024-9608

The MyParcel plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 4.24.1. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that...

6.1CVSS0.00299EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/12/13 11:23 a.m.•15 views

CVE-2024-9608 MyParcel <= 4.24.1 - Reflected Cross-Site Scripting

The MyParcel plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 4.24.1. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that...

6.1CVSS6.4AI score0.00299EPSS
SaveExploits0References2
CVE
CVE
•added 2024/12/13 11:23 a.m.•66 views

CVE-2024-9608

CVE-2024-9608 refers to a Reflected Cross-Site Scripting vulnerability in the WordPress MyParcel plugin that uses add_query_arg without proper escaping, affecting all versions up to 4.24.1. Exploitation could occur when a user clicks a crafted link in a Belgium-configured WooCommerce store. The v...

6.1CVSS6AI score0.00299EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/12/13 11:23 a.m.•32 views

CVE-2024-9608 MyParcel <= 4.24.1 - Reflected Cross-Site Scripting

The MyParcel plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 4.24.1. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that...

6.1CVSS0.00299EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2024/12/13 5:13 a.m.•14 views

WordPress MyParcel plugin <= 4.24.1 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by vgo0 in WordPress Plugin MyParcel versions = 4.24.1...

6.1CVSS6.3AI score0.00299EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/13 12:00 a.m.•5 views

CVE-2024-9608: Improper Neutralization of Input During Web Page Generation

The MyParcel plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 4.24.1. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that...

6.1CVSS6AI score0.00299EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/12/13 12:00 a.m.•15 views

WordPress plugin MyParcel 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...

6.1CVSS7.8AI score0.00299EPSS
SaveExploits0References2
Rows per page
Query Builder