Lucene search
+L

5 matches found

NVD
NVD
•added 2024/04/24 11:15 a.m.•36 views

CVE-2024-32711

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Saad Iqbal myCred mycred.This issue affects myCred: from n/a through = 2.6.3...

6.5CVSS6.4AI score0.00343EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/04/24 10:11 a.m.•18 views

CVE-2024-32711 WordPress myCred plugin <= 2.6.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in myCred allows Stored XSS.This issue affects myCred: from n/a through 2.6.3...

6.5CVSS6.5AI score0.00343EPSS
SaveExploits0References1
CVE
CVE
•added 2024/04/24 10:11 a.m.•105 views

CVE-2024-32711

The myCred WordPress plugin (versions n/a through 2.6.3 ) is vulnerable to Stored Cross-Site Scripting (XSS) due to the improper neutralization of input during web page generation. An attacker can inject malicious scripts into the website, which may result in unauthorized access or administrative...

6.5CVSS5.9AI score0.00343EPSS
SaveIn wildExploits0References2
Patchstack
Patchstack
•added 2024/04/22 12:00 a.m.•30 views

WordPress myCred Plugin <= 2.6.3 is vulnerable to Cross Site Scripting (XSS)

Software myCred Type Plugin Vulnerable versions = 2.6.3 Fixed in 2.6.4 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-32711 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 8867201beeee Credits stealthcopter Required privilege Subscrib...

6.5CVSS6.5AI score0.00343EPSS
SaveExploits0References2Affected Software1
VulnCheck KEV
VulnCheck KEV
•added 2024/04/22 12:00 a.m.•9 views

VulnCheck KEV: CVE-2024-32711

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in myCred allows Stored XSS.This issue affects myCred: from n/a through 2.6.3...

6.5CVSS5.8AI score0.00343EPSS
SaveIn wildExploits0References3
Rows per page
Query Builder