Lucene search
+L

4 matches found

RedhatCVE
RedhatCVE
•added 2025/05/17 9:01 p.m.•16 views

CVE-2024-8703

The Z-Downloads WordPress plugin before 1.11.6 does not sanitise and escape some parameters when outputting them in the page, which could allow unauthenticated visitors to perform Cross-Site Scripting attacks when accessing share URLs...

6.1CVSS6.3AI score0.00324EPSS
SaveExploits1References1
NVD
NVD
•added 2025/05/15 8:15 p.m.•13 views

CVE-2024-8703

The Z-Downloads WordPress plugin before 1.11.6 does not sanitise and escape some parameters when outputting them in the page, which could allow unauthenticated visitors to perform Cross-Site Scripting attacks when accessing share URLs...

6.1CVSS0.00324EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2025/05/15 8:07 p.m.•28 views

CVE-2024-8703 Z-Downloads < 1.11.6 - Unauthenticated Stored XSS

The Z-Downloads WordPress plugin before 1.11.6 does not sanitise and escape some parameters when outputting them in the page, which could allow unauthenticated visitors to perform Cross-Site Scripting attacks when accessing share URLs...

0.00324EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2025/05/15 8:07 p.m.•7 views

CVE-2024-8703 Z-Downloads < 1.11.6 - Unauthenticated Stored XSS

The Z-Downloads WordPress plugin before 1.11.6 does not sanitise and escape some parameters when outputting them in the page, which could allow unauthenticated visitors to perform Cross-Site Scripting attacks when accessing share URLs...

6.2AI score0.00324EPSS
SaveExploits1References1
Rows per page
Query Builder