Lucene search
+L

5 matches found

NVD
NVD
added 2024/04/24 11:15 a.m.23 views

CVE-2024-32711

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Saad Iqbal myCred mycred.This issue affects myCred: from n/a through = 2.6.3...

6.5CVSS6.4AI score0.00346EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/04/24 10:11 a.m.14 views

CVE-2024-32711 WordPress myCred plugin <= 2.6.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in myCred allows Stored XSS.This issue affects myCred: from n/a through 2.6.3...

6.5CVSS6.5AI score0.00346EPSS
SaveExploits0References1
CVE
CVE
added 2024/04/24 10:11 a.m.80 views

CVE-2024-32711

CVE-2024-32711 is a Stored XSS in the myCred WordPress plugin (vulnerable: up to 2.6.3). Root cause: Improper neutralization of input during web page generation. Impact: stored cross-site scripting could affect site visitors when the vulnerable input is rendered. Exploitation details are not expa...

6.5CVSS5.9AI score0.00346EPSS
SaveExploits0References2
VulnCheck KEV
VulnCheck KEV
added 2024/04/22 12:0 a.m.3 views

VulnCheck KEV: CVE-2024-32711

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in myCred allows Stored XSS.This issue affects myCred: from n/a through 2.6.3...

6.5CVSS5.8AI score0.00346EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2024/04/22 12:0 a.m.18 views

WordPress myCred Plugin <= 2.6.3 is vulnerable to Cross Site Scripting (XSS)

Software myCred Type Plugin Vulnerable versions = 2.6.3 Fixed in 2.6.4 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-32711 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 8867201beeee Credits stealthcopter Required privilege Subscrib...

6.5CVSS6.5AI score0.00346EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder