CVE-2024-13825

The Email Keep WordPress plugin through 1.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-13825

creationtimestamp| type| source ---|---|--- 2025-03-08 06:35:47+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6924 2025-03-08 09:20:07+00:00| seen| https://t.me/cvedetector/19884 2025-03-08 10:30:18+00:00| seen|...

CVE-2024-13825

The Email Keep WordPress plugin through 1.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-13825 Email Keep <= 1.1 - Reflected XSS

The Email Keep WordPress plugin through 1.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-13825

The Email Keep WordPress plugin (versions 1.1 and earlier ) is vulnerable to a Reflected Cross-Site Scripting (XSS) vulnerability. The root cause is the failure to properly sanitise and escape a parameter before it is outputted back to the page. This flaw could be exploited to target high-privile...