CVE-2024-12731

creationtimestamp| type| source ---|---|--- 2025-01-09 06:15:54+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfbzolxtsl2l 2025-01-09 06:16:29+00:00| seen| https://infosec.exchange/users/cve/statuses/113796932478379742 2025-01-09 06:17:34+00:00| seen|...

CVE-2024-12731

CVE-2024-12731 describes a Reflected XSS in the Aklamator INfeed WordPress plugin up to version 2.0.0. The flaw arises from insufficient sanitisation/escaping of a parameter before it is echoed back on the page, enabling an attacker to craft a payload that could affect high-privilege users (e.g.,...