Lucene search
+L

7 matches found

redhatcve
redhatcve
added 2025/03/15 8:55 a.m.7 views

CVE-2024-13885

The WP e-Customers Beta WordPress plugin through 0.0.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

7.1CVSS6AI score0.00253EPSS
Exploits1References1
nvd
nvd
added 2025/03/13 6:15 a.m.7 views

CVE-2024-13885

The WP e-Customers Beta WordPress plugin through 0.0.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

7.1CVSS0.00253EPSS
Exploits1References1
vulnrichment
vulnrichment
added 2025/03/13 6:0 a.m.5 views

CVE-2024-13885 WP E Customers <= 0.0.1 - Reflected XSS

The WP e-Customers Beta WordPress plugin through 0.0.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

6.6AI score0.00253EPSS
Exploits1References1
cve
cve
added 2025/03/13 6:0 a.m.46 views

CVE-2024-13885

CVE-2024-13885 affects the WP e-Customers Beta WordPress plugin (version

7.1CVSS5.8AI score0.00253EPSS
Exploits1References1Affected Software1
cvelist
cvelist
added 2025/03/13 6:0 a.m.14 views

CVE-2024-13885 WP E Customers <= 0.0.1 - Reflected XSS

The WP e-Customers Beta WordPress plugin through 0.0.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

0.00253EPSS
Exploits1References1
cnnvd
cnnvd
added 2025/03/13 12:0 a.m.3 views

WordPress plugin WP e-Customers Beta 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...

7.1CVSS8.2AI score0.00253EPSS
Exploits1References1
ptsecurity
ptsecurity
added 2025/03/13 12:0 a.m.4 views

PT-2025-11148 · WordPress · Wp E-Customers Beta

Name of the Vulnerable Software and Affected Versions: WP e-Customers Beta WordPress plugin version 0.0.1 Description: The issue concerns a Reflected Cross-Site Scripting problem. It arises because the WP e-Customers Beta WordPress plugin does not properly sanitise and escape a parameter before...

7.1CVSS8.6AI score0.00253EPSS
Exploits1References6
Rows per page
Query Builder