CVE-2024-13225

creationtimestamp| type| source ---|---|--- 2025-01-31 06:16:22+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgzdxogikx2w 2025-01-31 06:49:15+00:00| seen| https://infosec.exchange/users/cve/statuses/113921632187040762 2025-01-31 07:24:07+00:00| seen|...

CVE-2024-13225

The ECT Home Page Products WordPress plugin through 1.9 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-13225

The ECT Home Page Products WordPress plugin, specifically versions through 1.9 , is vulnerable to Reflected Cross-Site Scripting (XSS) . The root cause is the failure to sanitize and escape a parameter before it is outputted back to the page. Attackers can exploit this by tricking a victim, such ...

CVE-2024-13225 ECT Home Page Products <= 1.9 - Reflected XSS

The ECT Home Page Products WordPress plugin through 1.9 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...