CVE-2024-12585

The Property Hive WordPress plugin before 2.1.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-12585

The Property Hive WordPress plugin before 2.1.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-12585

creationtimestamp| type| source ---|---|--- 2025-01-08 06:09:07+00:00| seen| https://infosec.exchange/users/cve/statuses/113791241188437876 2025-01-08 06:15:43+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf7j7d6sa62k 2025-01-08 06:38:06+00:00| seen|...

CVE-2024-12585 PropertyHive < 2.1.1 - Reflected XSS

The Property Hive WordPress plugin before 2.1.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-12585 PropertyHive < 2.1.1 - Reflected XSS

The Property Hive WordPress plugin before 2.1.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-12585

The Property Hive WordPress plugin, in versions prior to 2.1.1 (specifically including 2.1.0 ), is vulnerable to Reflected Cross-Site Scripting (XSS) . The flaw is caused by insufficient input sanitization and output escaping of the 'ph_message' parameter. An unauthenticated attacker can exploit ...