CVE-2024-13222

The User Messages WordPress plugin through 1.2.4 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-13222 User Messages <= 1.2.4 - Reflected XSS

The User Messages WordPress plugin through 1.2.4 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-13222

The CVE-2024-13222 case concerns the WordPress User Messages plugin (versions up to 1.2.4). The issue is a reflected XSS caused by insufficient sanitization/escaping of a parameter before it is output on the page. Impact is described as enabling the attacker to run scripts in the context of high-...