Lucene search
WPScanVULNRICHMENT:CVE-2024-8056HistorySep 12, 2024 - 6:00 a.m.
CVE-2024-8056 MM-Breaking News <= 0.7.9 - Reflected XSS
2024-09-1206:00:07
WPScan
github.com
cve-2024-8056
mm-breaking news
reflected xss
wordpress plugin
AI Score
6.2
Confidence
High
EPSS
0.001
Percentile
17.7%
SSVC
Exploitation
poc
Automatable
no
Technical Impact
partial
The MM-Breaking News WordPress plugin through 0.7.9 does not escape the $_SERVER[‘REQUEST_URI’] parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers
Related
nvd
nvd
CVE-2024-8056
2024-09-12 06:15:25
cvelist
cvelist
CVE-2024-8056 MM-Breaking News <= 0.7.9 - Reflected XSS
2024-09-12 06:00:07
cve
cve
CVE-2024-8056
2024-09-12 06:15:25
wordfence
wordfence
AI Score
6.2
Confidence
High
EPSS
0.001
Percentile
17.7%
SSVC
Exploitation
poc
Automatable
no
Technical Impact
partial
Related for VULNRICHMENT:CVE-2024-8056