CVE-2024-3917

The Pet Manager WordPress plugin through 1.4 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-3917

The Pet Manager WordPress plugin through 1.4 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-3917 Pet Manager <= 1.4 - Reflected XSS

The Pet Manager WordPress plugin through 1.4 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-3917 Pet Manager <= 1.4 - Reflected XSS

The Pet Manager WordPress plugin through 1.4 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-3917

CVE-2024-3917 relates to the WordPress plugin Pet Manager, affected up to version 1.4. The issue is a Reflected XSS caused by not sanitising and escaping a parameter before echoing it on the page, potentially impacting admin users. Public sources consistently describe the vulnerability and its el...

WordPress Pet Manager Plugin <= 1.4 is vulnerable to Cross Site Scripting (XSS)

Software Pet Manager Type Plugin Vulnerable versions = 1.4 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-3917 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID d50e54d0e73b Credits Bob Matyas Required...