CVE-2024-13569

CVE-2024-13569 affects the Front End Users WordPress plugin (versions up to 3.2.32). It exposes a Reflected XSS due to insufficient sanitization/escaping of a parameter before output to the page, potentially impacting admin and other high-privilege users. Public details consistently describe the ...

CVE-2024-13222

The User Messages WordPress plugin through 1.2.4 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...