Lucene search
K

8 matches found

RedhatCVE
RedhatCVE
added 2025/03/22 6:8 a.m.6 views

CVE-2024-13878

The SpotBot WordPress plugin through 0.1.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

7.1CVSS6.3AI score0.00136EPSS
Exploits1References1
OSV
OSV
added 2025/03/20 6:15 a.m.1 views

CVE-2024-13878

The SpotBot WordPress plugin through 0.1.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

7.1CVSS7.3AI score
Exploits0References1
NVD
NVD
added 2025/03/20 6:15 a.m.7 views

CVE-2024-13878

The SpotBot WordPress plugin through 0.1.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

7.1CVSS0.00136EPSS
Exploits1References1
CVE
CVE
added 2025/03/20 6:0 a.m.45 views

CVE-2024-13878

CVE-2024-13878 affects the WordPress SpotBot plugin (versions

7.1CVSS6.1AI score0.00136EPSS
Exploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/03/20 6:0 a.m.4 views

CVE-2024-13878 SpotBot <= 0.1.8 - Reflected XSS

The SpotBot WordPress plugin through 0.1.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

6.5AI score0.00136EPSS
Exploits1References1
Cvelist
Cvelist
added 2025/03/20 6:0 a.m.9 views

CVE-2024-13878 SpotBot <= 0.1.8 - Reflected XSS

The SpotBot WordPress plugin through 0.1.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

0.00136EPSS
Exploits1References1
CNNVD
CNNVD
added 2025/03/20 12:0 a.m.1 views

WordPress plugin SpotBot 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

7.1CVSS7.6AI score0.00136EPSS
Exploits1References1
Patchstack
Patchstack
added 2025/03/04 1:21 a.m.2 views

WordPress SpotBot plugin <= 0.1.8 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by Hassan Khan Yusufzai - Splint3r7 in WordPress Plugin SpotBot versions = 0.1.8...

7.1CVSS6.4AI score0.00136EPSS
Exploits1References1Affected Software1
Rows per page
Query Builder