| |
Vulnerability CVE-2024-3048
Published: 2024-04-26
| Description: |
The Bannerlid WordPress plugin through 1.1.0 does not escape generated URLs before outputting them in attributes, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as administrators |
References: |
https://wpscan.com/vulnerability/e179ff7d-137c-48bf-8b18-e874e3f876f4/
|
|
|
Copyright 2024, cxsecurity.com
|
|
|
