CVE-2024-13885

The WP e-Customers Beta WordPress plugin (version 0.0.1 ) is vulnerable to Reflected Cross-Site Scripting (XSS) . The root cause is the failure to properly sanitise and escape a parameter before it is outputted back onto the page. This flaw could be leveraged to target high-privilege users, such ...