Lucene search
+L

4 matches found

Vulnrichment
Vulnrichment
•added 2024/05/15 6:00 a.m.•18 views

CVE-2024-3634 month name translation benaceur < 2.3.8 - Admin+ Stored XSS

The month name translation benaceur WordPress plugin before 2.3.8 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite...

5.6AI score0.00352EPSS
SaveExploits2References1
Cvelist
Cvelist
•added 2024/05/15 6:00 a.m.•30 views

CVE-2024-3634 month name translation benaceur < 2.3.8 - Admin+ Stored XSS

The month name translation benaceur WordPress plugin before 2.3.8 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite...

5.5AI score0.00352EPSS
SaveExploits2References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/15 12:00 a.m.•2 views

CVE-2024-3634: Improper Neutralization of Input During Web Page Generation

The month name translation benaceur WordPress plugin before 2.3.8 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite...

4.8CVSS5.9AI score0.00352EPSS
SaveExploits2References1
CNNVD
CNNVD
•added 2024/05/15 12:00 a.m.•10 views

WordPress plugin month name translation benaceur 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the...

4.8CVSS6.3AI score0.00352EPSS
SaveExploits2References2
Rows per page
Query Builder