Privacy Policy Genius - Cross-Site Scripting

Privacy Policy Genius WordPress plugin v2.0.4 contains a reflected cross-site scripting caused by unsanitized parameter output in the page, letting attackers execute malicious scripts in the context of high privilege users, exploit requires attacker to craft a malicious URL. id: CVE-2024-13219...

CVE-2024-13219

The Privacy Policy Genius WordPress plugin through 2.0.4 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-13219

CVE-2024-13219 is a Reflected XSS in the Privacy Policy Genius WordPress plugin up to version 2.0.4, caused by insufficient sanitisation/escaping of a parameter before output. The issue could impact high-privilege users (e.g., admins) when the vulnerable plugin is active. Publicly available detai...