CVE-2024-11945

creationtimestamp| type| source ---|---|--- 2024-12-10 09:33:04+00:00| seen| https://infosec.exchange/users/cve/statuses/113627836177825658 2024-12-10 11:37:14+00:00| seen| https://t.me/cvedetector/12490...

CVE-2024-11945 Email Reminders <= 2.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter

The Email Reminders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ parameter in all versions up to, and including, 2.0.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access an...

CVE-2024-11945

CVE-2024-11945 is a Stored Cross-Site Scripting flaw in the Email Reminders plugin for WordPress. The issue arises from insufficient input sanitization and output escaping in the id parameter, affecting all versions up to and including 2.0.4. Exploitation requires authenticated access (Contributo...

CVE-2024-11945 Email Reminders <= 2.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter

The Email Reminders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ parameter in all versions up to, and including, 2.0.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access an...