CVE-2024-12714

The Backlink Monitoring Manager WordPress plugin through 0.1.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-12714

The Backlink Monitoring Manager WordPress plugin through 0.1.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-12714

creationtimestamp| type| source ---|---|--- 2025-01-09 06:01:28+00:00| seen| https://infosec.exchange/users/cve/statuses/113796873447761027 2025-01-09 06:15:46+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfbzoe4mzz22 2025-01-09 06:20:54+00:00| seen|...

CVE-2024-12714

CVE-2024-12714 concerns the Backlink Monitoring Manager WordPress plugin (up to version 0.1.3). The issue is a Reflected Cross-Site Scripting caused by not sanitising/escaping a parameter before output. This could affect high-privilege users such as admins. The WordFence record indicates the vuln...