rcno-reviews

Recencio Book Reviews 一个用于管理和展示图书评论的 WordPress 插件。自定义文章类型、7 个分类法、13 个短代码、7 个小工具、6 个模板、5 个扩展。所有数据均存储在标准的 WordPress post meta 中——没有自定义数据表。 背景 Recencio Book Reviews 由 Kemory Grubb （w33zy）创建并发布在 WordPress 插件目录中。Kemory 于 2024 年去世。该插件长期无人维护，存在一个已知的存储型 XSS 漏洞（CVE-2024-33648），并且没有任何修复途径。 2026 年，Tom Stayt...

CVE-2024-33648

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kemory Grubb Recencio Book Reviews recencio-book-reviews allows DOM-Based XSS.This issue affects Recencio Book Reviews: from n/a through = 1.66.0...

CVE-2024-33648

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kemory Grubb Recencio Book Reviews allows DOM-Based XSS.This issue affects Recencio Book Reviews: from n/a through 1.66.0...

CVE-2024-33648 WordPress Recencio Book Reviews plugin <= 1.66.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kemory Grubb Recencio Book Reviews allows DOM-Based XSS.This issue affects Recencio Book Reviews: from n/a through 1.66.0...

CVE-2024-33648

CVE-2024-33648 is a Stored XSS in Recencio Book Reviews (WordPress plugin). Affected: Recencio Book Reviews versions up to 1.66.0. Issue arises from improper neutralization of input during web page generation. CVSS v3.1 base score 6.5 (Medium); attack requires user interaction and is exploitable ...

CVE-2024-33648 WordPress Recencio Book Reviews plugin <= 1.66.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kemory Grubb Recencio Book Reviews recencio-book-reviews allows DOM-Based XSS.This issue affects Recencio Book Reviews: from n/a through = 1.66.0...

WordPress Recencio Book Reviews Plugin <= 1.66.0 is vulnerable to Cross Site Scripting (XSS)

Software Recencio Book Reviews Type Plugin Vulnerable versions = 1.66.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-33648 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 1d6b95a95ae6 Credits Ngô Thiên An ancorn from VNPT-VCI...