CVE-2024-13878

creationtimestamp| type| source ---|---|--- 2025-03-20 06:18:05+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8173 2025-03-20 09:02:12+00:00| seen| https://t.me/cvedetector/20694 2025-03-20 09:03:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lksdolhcez2m...

CVE-2024-13878

The SpotBot WordPress plugin through 0.1.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-13878 SpotBot <= 0.1.8 - Reflected XSS

The SpotBot WordPress plugin through 0.1.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...