Lucene search
K

4 matches found

CVE
CVE
added 2024/03/20 6:48 a.m.61 views

CVE-2024-1379

CVE-2024-1379 affects Website Article Monetization By MageNet for WordPress. All versions up to 1.0.11 are vulnerable to unauthenticated Stored XSS via the abp_auth_key parameter due to insufficient input sanitization/output escaping and a missing authorization check, enabling injection of script...

6.1CVSS6.1AI score0.01637EPSS
Exploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2024/03/20 6:48 a.m.12 views

CVE-2024-1379

The Website Article Monetization By MageNet plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'abpauthkey' parameter in all versions up to, and including, 1.0.11 due to insufficient input sanitization and output escaping and a missing authorization check. This makes it...

6.1CVSS6.1AI score0.01637EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/03/20 12:0 a.m.1 views

WordPress Plugin Website Article Monetization By MageNet Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

6.1CVSS6AI score0.01637EPSS
Exploits0References3
WPVulnDB
WPVulnDB
added 2024/03/19 12:0 a.m.17 views

Website Article Monetization By MageNet < 1.0.12 - Unauthenticated Stored XSS

Description The plugin is vulnerable to Stored Cross-Site Scripting via the 'abpauthkey' parameter due to insufficient input sanitization and output escaping and a missing authorization check. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will...

6.1CVSS6.3AI score0.01637EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder