5 matches found
CVE-2024-32711
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Saad Iqbal myCred mycred.This issue affects myCred: from n/a through = 2.6.3...
CVE-2024-32711 WordPress myCred plugin <= 2.6.3 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in myCred allows Stored XSS.This issue affects myCred: from n/a through 2.6.3...
CVE-2024-32711
The myCred WordPress plugin (versions n/a through 2.6.3 ) is vulnerable to Stored Cross-Site Scripting (XSS) due to the improper neutralization of input during web page generation. An attacker can inject malicious scripts into the website, which may result in unauthorized access or administrative...
WordPress myCred Plugin <= 2.6.3 is vulnerable to Cross Site Scripting (XSS)
Software myCred Type Plugin Vulnerable versions = 2.6.3 Fixed in 2.6.4 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-32711 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 8867201beeee Credits stealthcopter Required privilege Subscrib...
VulnCheck KEV: CVE-2024-32711
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in myCred allows Stored XSS.This issue affects myCred: from n/a through 2.6.3...