CVE-2024-8799

CVE-2024-8799 affects the WordPress plugin Custom Banners (versions ≤ 3.3), enabling unauthenticated Reflected Cross-Site Scripting via add_query_arg usage without proper escaping. Root cause: URL handling weakness in the plugin enables injection in pages executed by users; impact is reflected XS...

WordPress Custom Banners Plugin <= 3.3 is vulnerable to Cross Site Scripting (XSS)

Software Custom Banners Type Plugin Vulnerable versions = 3.3 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-8799 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID cfcbb86b25ba Credits vgo0 Required privilege...