Lucene search

CVE-2024-12701 WP Smart Import : Import any XML File to WordPress <= 1.1.2 - Reflected Cross-Site Scripting

🗓️ 04 Jan 2025 07:23:24Reported by WordfenceType

Vulnerability in WP Smart Import plugin allows reflected cross-site scripting via 'page' parameter.

Reporter	Title	Published	Views	Family All 4
CVE	CVE-2024-12701	4 Jan 202508:15	–	cve
Cvelist	CVE-2024-12701 WP Smart Import : Import any XML File to WordPress <= 1.1.2 - Reflected Cross-Site Scripting	4 Jan 202507:24	–	cvelist
NVD	CVE-2024-12701	4 Jan 202508:15	–	nvd
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (December 16, 2024 to January 5, 2025)	9 Jan 202514:35	–	wordfence

Source	Link
plugins	www.plugins.trac.wordpress.org/changeset/3212009/
plugins	www.plugins.trac.wordpress.org/browser/wp-smart-import/trunk/controller/manage_controller.php
plugins	www.plugins.trac.wordpress.org/browser/wp-smart-import/trunk/controller/file_manage_controller.php
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/27153c13-6bdc-4873-8a05-8aab6ba4243d

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

04 Jan 2025 07:24Current

6.1Medium risk

Vulners AI Score6.1

CVSS36.1

SSVC

CWE-79