Lucene search
+L

10 matches found

RedhatCVE
RedhatCVE
•added 2025/03/22 6:08 a.m.•21 views

CVE-2024-13878

The SpotBot WordPress plugin through 0.1.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

7.1CVSS8.6AI score0.00285EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2025/03/20 6:15 a.m.•23 views

CVE-2024-13878

The SpotBot WordPress plugin through 0.1.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

7.1CVSS8.4AI score0.00285EPSS
SaveExploits1References1
NVD
NVD
•added 2025/03/20 6:15 a.m.•26 views

CVE-2024-13878

The SpotBot WordPress plugin through 0.1.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

7.1CVSS0.00285EPSS
SaveExploits1References1
CVE
CVE
•added 2025/03/20 6:00 a.m.•71 views

CVE-2024-13878

The SpotBot WordPress plugin, in versions 0.1.8 and earlier , is vulnerable to Reflected Cross-Site Scripting (XSS) . The root cause is the failure to properly sanitise and escape a parameter before outputting it back to the page. This flaw could be exploited to target high-privilege users, such ...

7.1CVSS8.4AI score0.00285EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
•added 2025/03/20 6:00 a.m.•11 views

CVE-2024-13878 SpotBot <= 0.1.8 - Reflected XSS

The SpotBot WordPress plugin through 0.1.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

8.4AI score0.00285EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2025/03/20 6:00 a.m.•40 views

CVE-2024-13878 SpotBot <= 0.1.8 - Reflected XSS

The SpotBot WordPress plugin through 0.1.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

0.00285EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/20 12:00 a.m.•11 views

CVE-2024-13878: Improper Neutralization of Input During Web Page Generation

The SpotBot WordPress plugin through 0.1.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

7.1CVSS8.6AI score0.00285EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/03/20 12:00 a.m.•9 views

PT-2025-12009

Name of the Vulnerable Software and Affected Versions SpotBot WordPress plugin versions 0.1.8 and earlier Description The issue is related to a Reflected Cross-Site Scripting problem. It occurs because the SpotBot WordPress plugin does not properly sanitise and escape a parameter before outputtin...

7.1CVSS8.5AI score0.00285EPSS
SaveExploits1References8
CNNVD
CNNVD
•added 2025/03/20 12:00 a.m.•17 views

WordPress plugin SpotBot has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

7.1CVSS8AI score0.00285EPSS
SaveExploits1References1
Patchstack
Patchstack
•added 2025/03/04 1:21 a.m.•19 views

WordPress SpotBot plugin <= 0.1.8 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by Hassan Khan Yusufzai - Splint3r7 in WordPress Plugin SpotBot versions = 0.1.8...

7.1CVSS8.4AI score0.00285EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder