CVE-2024-13225

creationtimestamp| type| source ---|---|--- 2025-01-31 06:16:22+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgzdxogikx2w 2025-01-31 06:49:15+00:00| seen| https://infosec.exchange/users/cve/statuses/113921632187040762 2025-01-31 07:24:07+00:00| seen|...

CVE-2024-13225

The ECT Home Page Products WordPress plugin through 1.9 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-13225

The CVE CVE-2024-13225 affects the ECT Home Page Products WordPress plugin (versions up to 1.9), where a parameter is not sanitized/escaped before being output, enabling a Reflected XSS against high-privilege users (e.g., admins). The CVSS 3.1 base score is 6.1 (UI: REQUIRED; AV:N/AC:L/PR:N/C:L/I...

CVE-2024-13225 ECT Home Page Products <= 1.9 - Reflected XSS

The ECT Home Page Products WordPress plugin through 1.9 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...