CVE-2024-12405

creationtimestamp| type| source ---|---|--- 2024-12-24 05:43:01+00:00| seen| https://infosec.exchange/users/cve/statuses/113706203913779612 2024-12-24 06:15:58+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldzs7xvozp22 2024-12-24 07:42:38+00:00| seen|...

CVE-2024-12405

CVE-2024-12405 : Reflected XSS in the WordPress plugin “Export Customers Data” (vulnerable up to 1.2.3) via the t parameter due to insufficient input sanitization and output escaping. Unauthenticated attackers can inject scripts that run when a user interacts with the page; no public fix/version ...