Lucene search
+L

8 matches found

RedhatCVE
RedhatCVE
•added 2025/03/15 8:55 a.m.•19 views

CVE-2024-13885

The WP e-Customers Beta WordPress plugin through 0.0.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

7.1CVSS6AI score0.00268EPSS
SaveExploits1References1
NVD
NVD
•added 2025/03/13 6:15 a.m.•20 views

CVE-2024-13885

The WP e-Customers Beta WordPress plugin through 0.0.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

7.1CVSS0.00268EPSS
SaveExploits1References1
CVE
CVE
•added 2025/03/13 6:00 a.m.•61 views

CVE-2024-13885

The WP e-Customers Beta WordPress plugin (version 0.0.1 ) is vulnerable to Reflected Cross-Site Scripting (XSS) . The root cause is the failure to properly sanitise and escape a parameter before it is outputted back to the page. This flaw could be exploited to target high-privilege users, such as...

5.8AI score0.00268EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
•added 2025/03/13 6:00 a.m.•11 views

CVE-2024-13885 WP E Customers <= 0.0.1 - Reflected XSS

The WP e-Customers Beta WordPress plugin through 0.0.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

6.6AI score0.00268EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2025/03/13 6:00 a.m.•29 views

CVE-2024-13885 WP E Customers <= 0.0.1 - Reflected XSS

The WP e-Customers Beta WordPress plugin through 0.0.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

0.00268EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/03/13 12:00 a.m.•12 views

PT-2025-11148 · WordPress · Wp E-Customers Beta

Name of the Vulnerable Software and Affected Versions: WP e-Customers Beta WordPress plugin version 0.0.1 Description: The issue concerns a Reflected Cross-Site Scripting problem. It arises because the WP e-Customers Beta WordPress plugin does not properly sanitise and escape a parameter before...

7.1CVSS8.6AI score0.00268EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/03/13 12:00 a.m.•11 views

WordPress plugin WP e-Customers Beta 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...

7.1CVSS8.2AI score0.00268EPSS
SaveExploits1References1
Patchstack
Patchstack
•added 2025/03/04 1:08 a.m.•11 views

WordPress WP e-Customers Beta plugin <= 0.0.1 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by Hassan Khan Yusufzai - Splint3r7 in WordPress Plugin WP e-Customers Beta versions = 0.0.1...

7.1CVSS6.4AI score0.00268EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder