Lucene search
+L

3 matches found

Cvelist
Cvelist
added 2024/12/16 2:31 p.m.28 views

CVE-2024-54406 WordPress Comments On Feed plugin <= 1.2.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in moallemi Comments On Feed comments-on-feed allows Reflected XSS.This issue affects Comments On Feed: from n/a through = 1.2.1...

7.1CVSS0.00418EPSS
SaveExploits0References1
CVE
CVE
added 2024/12/16 2:31 p.m.46 views

CVE-2024-54406

CVE-2024-54406 is a Reflected XSS in the WordPress plugin Comments On Feed (vulnerable: up to 1.2.1; affected from n/a). Root cause: Improper neutralization of input during web page generation. Impact is described as Cross‑site Scripting with HIGH base risk (CVSS 3.1: AV:N/AC:L/PR:N/UI:R/S:C/C:L/...

7.1CVSS7.2AI score0.00418EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/12/16 2:31 p.m.11 views

CVE-2024-54406 WordPress Comments On Feed plugin <= 1.2.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Reza Moallemi Comments On Feed allows Reflected XSS.This issue affects Comments On Feed: from n/a through 1.2.1...

7.1CVSS7AI score0.00418EPSS
SaveExploits0References1
Rows per page
Query Builder