Lucene search

K
vulnrichmentWPScanVULNRICHMENT:CVE-2024-3918
HistoryMay 23, 2024 - 6:00 a.m.

CVE-2024-3918 Pet Manager <= 1.4 - Contributor+ Stored XSS

2024-05-2306:00:03
WPScan
github.com
1
pet manager
wordpress
stored xss
vulnerability
contributor
cross-site scripting

AI Score

5.7

Confidence

High

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

The Pet Manager WordPress plugin through 1.4 does not sanitise and escape some of its Pet settings, which could allow high privilege users such as Contributor to perform Stored Cross-Site Scripting attacks.

AI Score

5.7

Confidence

High

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

Related for VULNRICHMENT:CVE-2024-3918