CVE-2024-5604

The Bug Library WordPress plugin versions prior to 2.1.2 is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the failure to properly sanitize and escape certain plugin settings. This flaw allows high-privilege users, such as administrators, to perform XSS attacks, even in envir...

CVE-2024-5450

The Bug Library WordPress plugin (versions before 2.1.1 ) contains an unauthenticated Remote Code Execution (RCE) vulnerability. The root cause is a failure to perform file type validation on user-submitted bug reports, which allows an unauthenticated attacker to upload PHP files . Impacted by CW...