Lucene search
+L

2 matches found

Cvelist
Cvelist
•added 2024/11/13 6:47 a.m.•54 views

CVE-2024-10877 AFI – The Easiest Integration Plugin <= 1.92.0 - Reflected Cross-Site Scripting

The AFI – The Easiest Integration Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg & removequeryarg without appropriate escaping on the URL in all versions up to, and including, 1.92.0. This makes it possible for unauthenticated attackers t...

6.1CVSS0.00575EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/13 12:00 a.m.•2 views

CVE-2024-10877: Improper Neutralization of Input During Web Page Generation

The AFI – The Easiest Integration Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg & removequeryarg without appropriate escaping on the URL in all versions up to, and including, 1.92.0. This makes it possible for unauthenticated attackers t...

6.1CVSS6AI score0.00575EPSS
SaveExploits0References1
Rows per page
Query Builder