CVE-2024-13877

The Passbeemedia Web Push Notification WordPress plugin through 1.0.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-13877

creationtimestamp| type| source ---|---|--- 2025-03-20 06:18:06+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8174 2025-03-20 09:02:11+00:00| seen| https://t.me/cvedetector/20693 2025-03-20 09:03:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lksdomessz2s...

CVE-2024-13877 Passbeemedia Web Push Notifications <= 1.0.0 - Reflected XSS

The Passbeemedia Web Push Notification WordPress plugin through 1.0.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-13877 Passbeemedia Web Push Notifications <= 1.0.0 - Reflected XSS

The Passbeemedia Web Push Notification WordPress plugin through 1.0.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-13877

CVE-2024-13877 affects the Passbeemedia Web Push Notifications WordPress plugin (versions