CVE-2024-6019

Publication date

2024-09-12 06:00:03

Family

WPScan

State

PUBLISHED

Description

The Music Request Manager WordPress plugin through 1.3 does not sanitise and escape incoming music requests, which could allow unauthenticated users to perform Cross-Site Scripting attacks against administrators