CVE-2024-13332

The TransFinanz WordPress plugin through 1.0.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-13332

creationtimestamp| type| source ---|---|--- 2025-02-04 06:16:16+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhdft6fq6e2f 2025-02-04 06:43:14+00:00| seen| https://infosec.exchange/users/cve/statuses/113944257740323451 2025-02-04 08:02:12+00:00| seen|...

CVE-2024-13332

The TransFinanz WordPress plugin through 1.0.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-13332 TransFinanz <= 1.0.0 - Reflected XSS

The TransFinanz WordPress plugin through 1.0.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...