CVE-2024-13880

The My Quota WordPress plugin through 1.0.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-13880

creationtimestamp| type| source ---|---|--- 2025-03-20 06:18:04+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8172 2025-03-20 09:02:13+00:00| seen| https://t.me/cvedetector/20695 2025-03-20 09:03:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lksdom5pl...

CVE-2024-13880

The My Quota WordPress plugin through 1.0.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...