CVE-2024-13624
HIGH
Published 2025-02-26T06:00:08.816Z
Actions:
CVSS Score
V3.1
7.1
/10
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
Base Score Metrics
Exploitability: N/A
Impact: N/A
Attack Vector Metrics
Impact Metrics
Description
The WPMovieLibrary WordPress plugin through 2.1.4.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.
Available Exploits
WordPress WPMovieLibrary Plugin <= 2.1.4.8 - Cross-Site Scripting
The WPMovieLibrary WordPress plugin through version 2.1.4.8 contains a reflected cross-site scripting vulnerability. The plugin does not properly sanitize and escape the 'order' parameter in the import page before outputting it back, which could allow attackers to execute arbitrary JavaScript code in an administrator's browser context.
ID: CVE-2024-13624
Author: ritikchaddha
High
Related News
No news articles found for this CVE.
Affected Products
Affected Versions:
Published: 2025-02-26T06:00:08.816Z
Last Modified: 2025-02-26T15:45:44.910Z
Copied to clipboard!