CVE-2024-13626

The VR-Frases collect & share quotes WordPress plugin through 3.0.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-13626

The VR-Frases collect & share quotes WordPress plugin through 3.0.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-13626

CVE-2024-13626 – VR-Frases WordPress plugin Description from multiple sources: The VR-Frases (collect & share quotes) plugin for WordPress, up to version 3.0.1, does not sanitize/escape a parameter before echoing it on the page, resulting in a Reflected Cross-Site Scripting (XSS). This vulnerabil...

CVE-2024-13626 VR Frases <= 3.0.1 - Reflected XSS

The VR-Frases collect & share quotes WordPress plugin through 3.0.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...