CVE-2024-12628

creationtimestamp| type| source ---|---|--- 2024-12-14 07:05:07+00:00| seen| https://infosec.exchange/users/cve/statuses/113649903611070324 2024-12-14 09:20:23+00:00| seen| https://t.me/cvedetector/12935...

CVE-2024-12628

CVE-2024-12628 (bodi0’s Easy Cache, WordPress) Stored Cross-Site Scripting vulnerability in the cache storing path parameter (cache-folder) affects all versions up to 0.8. Exploitation requires authenticated admin+ privileges and is limited to multi-site deployments and sites where unfiltered_htm...

CVE-2024-12628 bodi0’s Easy Cache <= 0.8 - Authenticated (Admin+) Stored Cross-Site Scripting

The bodi0s Easy cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'cache-folder' parameter in all versions up to, and including, 0.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-lev...