Beveiligingsadvies

CVE-2024-6710

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-08-05 06:00:08
Laatst bijgewerkt 2024-08-07 20:27:21
Toegewezen door WPScan
CVSS-score 5.4
Status PUBLISHED

Beschrijving

The Ditty WordPress plugin before 3.1.45 does not sanitise and escape some parameters, which could allow users with a role as low as Contributor to perform Cross-Site Scripting attacks.