CVE-2024-12586

The Chalet-Montagne.com Tools WordPress plugin through 2.7.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-12586

The Chalet-Montagne.com Tools WordPress plugin through 2.7.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-12586

creationtimestamp| type| source ---|---|--- 2025-02-13 06:10:17+00:00| seen| https://infosec.exchange/users/cve/statuses/113995088985958672 2025-02-13 06:15:45+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhzzyjusar2z 2025-02-13 07:10:29+00:00| seen|...

CVE-2024-12586

CVE-2024-12586 affects Chalet-Montagne.com Tools WordPress plugin (

CVE-2024-12586 Chalet Montagne Com Tools <= 2.7.8 - Reflected XSS

The Chalet-Montagne.com Tools WordPress plugin through 2.7.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...