Beveiligingsadvies

CVE-2024-3048

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-04-26 05:00:03

Laatst bijgewerkt 2024-11-20 17:26:28

Toegewezen door WPScan

CVSS-score 5.5

Status PUBLISHED

Beschrijving

The Bannerlid WordPress plugin through 1.1.0 does not escape generated URLs before outputting them in attributes, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as administrators

← Alle CVE's bekijken Bekijk op cve.org ↗