Lucene search
+L

3 matches found

Cvelist
Cvelist
added 2024/05/15 6:0 a.m.22 views

CVE-2024-3634 month name translation benaceur < 2.3.8 - Admin+ Stored XSS

The month name translation benaceur WordPress plugin before 2.3.8 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite...

5.5AI score0.00352EPSS
SaveExploits2References1
Vulnrichment
Vulnrichment
added 2024/05/15 6:0 a.m.18 views

CVE-2024-3634 month name translation benaceur < 2.3.8 - Admin+ Stored XSS

The month name translation benaceur WordPress plugin before 2.3.8 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite...

5.6AI score0.00352EPSS
SaveExploits2References1
CNNVD
CNNVD
added 2024/05/15 12:0 a.m.5 views

WordPress plugin month name translation benaceur 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the...

4.8CVSS6.3AI score0.00352EPSS
SaveExploits2References2
Rows per page
Query Builder