CVE-2024-12585

The Property Hive WordPress plugin before 2.1.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-12585

The Property Hive WordPress plugin before 2.1.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-12585

creationtimestamp| type| source ---|---|--- 2025-01-08 06:09:07+00:00| seen| https://infosec.exchange/users/cve/statuses/113791241188437876 2025-01-08 06:15:43+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf7j7d6sa62k 2025-01-08 06:38:06+00:00| seen|...

CVE-2024-12585 PropertyHive < 2.1.1 - Reflected XSS

The Property Hive WordPress plugin before 2.1.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-12585 PropertyHive < 2.1.1 - Reflected XSS

The Property Hive WordPress plugin before 2.1.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-12585

CVE-2024-12585 affects the Property Hive WordPress plugin (vulnerable through 2.1.1). The issue is a Reflected XSS: a parameter is output back to the page without proper sanitisation/escaping, enabling an attacker to craft input that could affect high-privilege users (e.g., admins). The Red Hat a...