Lucene search
+L

5 matches found

RedhatCVE
RedhatCVE
added 2025/02/05 3:22 a.m.9 views

CVE-2024-51708

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Narnoo Narnoo Commerce Manager narnoo-commerce-manager allows Reflected XSS.This issue affects Narnoo Commerce Manager: from n/a through = 1.6.0...

7.1CVSS7.2AI score0.00259EPSS
Exploits0References1
CVE
CVE
added 2024/11/09 12:9 p.m.51 views

CVE-2024-51708

CVE-2024-51708 is a reflected XSS in Narnoo Commerce Manager (WordPress plugin) affecting versions up to 1.6.0. The issue stems from improper input neutralization during web-page generation, enabling a reflected Cross-Site Scripting payload. The CVE has a CVSS v3.1 base score of 7.1 ( HIGH ), wit...

7.1CVSS7.2AI score0.00259EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/11/09 12:9 p.m.16 views

CVE-2024-51708 WordPress Narnoo Commerce Manager plugin <= 1.6.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Narnoo Narnoo Commerce Manager narnoo-commerce-manager allows Reflected XSS.This issue affects Narnoo Commerce Manager: from n/a through = 1.6.0...

7.1CVSS7.2AI score0.00259EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/11/09 12:9 p.m.44 views

CVE-2024-51708 WordPress Narnoo Commerce Manager plugin <= 1.6.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Narnoo Narnoo Commerce Manager narnoo-commerce-manager allows Reflected XSS.This issue affects Narnoo Commerce Manager: from n/a through = 1.6.0...

7.1CVSS0.00259EPSS
Exploits0References1
Patchstack
Patchstack
added 2024/11/04 12:0 a.m.18 views

WordPress Narnoo Commerce Manager Plugin <= 1.6.0 is vulnerable to Cross Site Scripting (XSS)

Software Narnoo Commerce Manager Type Plugin Vulnerable versions = 1.6.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51708 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 1daa09058da0 Credits João Pedro S Alcântara...

7.1CVSS6.9AI score0.00259EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder