Lucene search
+L

4 matches found

RedhatCVE
RedhatCVE
•added 2025/02/08 4:36 a.m.•15 views

CVE-2024-13331

The WP Dream Carousel WordPress plugin through 1.0.1b does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

6.1CVSS6AI score0.00584EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2025/02/04 6:00 a.m.•32 views

CVE-2024-13331 WP Dream Carousel <= 1.0.1b - Reflected XSS

The WP Dream Carousel WordPress plugin through 1.0.1b does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

0.00584EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2025/02/04 6:00 a.m.•26 views

CVE-2024-13331 WP Dream Carousel <= 1.0.1b - Reflected XSS

The WP Dream Carousel WordPress plugin through 1.0.1b does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

6.1AI score0.00584EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/04 12:00 a.m.•2 views

CVE-2024-13331: Improper Neutralization of Input During Web Page Generation

The WP Dream Carousel WordPress plugin through 1.0.1b does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

6.1CVSS5.8AI score0.00584EPSS
SaveExploits1References1
Rows per page
Query Builder