Lucene search
Bob MatyasWPVDB-ID:17482B2C-C9BA-480A-8000-879BAF835AF7HistoryJun 07, 2024 - 12:00 a.m.
Pagerank Tools <= 1.1.5 - Reflected XSS
2024-06-0700:00:00
Bob Matyas
wpscan.com
12
pagerank tools
xss
reflected cross-site scripting
sanitisation
high privilege users
security issue
plugin vulnerability
Description The plugin does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
PoC
https://example.com/wp-admin/tools.php?page=page_pageranks&url;=">
Related
cve
cve
CVE-2024-5730
2024-06-28 06:15:06
vulnrichment
vulnrichment
CVE-2024-5730 Pagerank Tools <= 1.1.5 - Reflected XSS
2024-06-28 06:00:05
wpexploit
wpexploit
Pagerank Tools <= 1.1.5 - Reflected XSS
2024-06-07 00:00:00
cvelist
cvelist
CVE-2024-5730 Pagerank Tools <= 1.1.5 - Reflected XSS
2024-06-28 06:00:05
nvd
nvd
CVE-2024-5730
2024-06-28 06:15:06
wordfence
wordfence
AI Score
8.5
Confidence
High
EPSS
0
Percentile
9.1%
Related for WPVDB-ID:17482B2C-C9BA-480A-8000-879BAF835AF7