CVE-2024-12731

creationtimestamp| type| source ---|---|--- 2025-01-09 06:15:54+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfbzolxtsl2l 2025-01-09 06:16:29+00:00| seen| https://infosec.exchange/users/cve/statuses/113796932478379742 2025-01-09 06:17:34+00:00| seen|...

CVE-2024-12731

The Aklamator INfeed WordPress plugin (through version 2.0.0 ) is vulnerable to Reflected Cross-Site Scripting (XSS) . The root cause is the failure to properly sanitise and escape a parameter before it is output back onto the page. This vulnerability could be exploited against high-privilege use...