CVE-2024-13347

The Essential WP Real Estate WordPress plugin through 1.1.3 does not escape generated URLs before outputting them in attributes, leading to Reflected Cross-Site Scripting...

CVE-2024-13347

creationtimestamp| type| source ---|---|--- 2025-02-03 06:15:38+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhavd4oufv2f 2025-02-03 09:27:14+00:00| seen| https://t.me/cvedetector/17056 2025-02-06 02:39:10+00:00| seen|...

CVE-2024-13347

The Essential WP Real Estate WordPress plugin (versions 1.1.3 and earlier ) is vulnerable to Reflected Cross-Site Scripting (XSS) . The root cause is the failure to properly escape generated URLs before they are outputted into HTML attributes, which can allow for the execution of malicious script...

CVE-2024-13347 Essential WP Real Estate <= 1.1.3 - Reflected XSS

The Essential WP Real Estate WordPress plugin through 1.1.3 does not escape generated URLs before outputting them in attributes, leading to Reflected Cross-Site Scripting...