CVE-2024-12715

The Asgard Security Scanner WordPress plugin through 0.7 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-12715

creationtimestamp| type| source ---|---|--- 2025-01-09 06:01:28+00:00| seen| https://infosec.exchange/users/cve/statuses/113796873461465275 2025-01-09 06:15:49+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfbzogzb572d 2025-01-09 06:19:53+00:00| seen|...

CVE-2024-12715 Asgard Security Scanner <= 0.7 - Reflected XSS

The Asgard Security Scanner WordPress plugin through 0.7 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-12715 Asgard Security Scanner <= 0.7 - Reflected XSS

The Asgard Security Scanner WordPress plugin through 0.7 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-12715

The Asgard Security Scanner WordPress plugin, in versions 0.7 and earlier , is vulnerable to a Reflected Cross-Site Scripting (XSS) flaw. The root cause is the failure to properly sanitize and escape a parameter before it is outputted back to the page. This vulnerability could be leveraged to tar...