CVE-2024-6223

July 30, 2024, 1:32 p.m.

Product(s) Impacted

Send email only on Reply to My Comment WordPress plugin

up to 1.0.6

Description

The Send email only on Reply to My Comment WordPress plugin through 1.0.6 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin

Weaknesses

Date

Published: July 30, 2024, 6:15 a.m.

Last Modified: July 30, 2024, 1:32 p.m.

Status : Awaiting Analysis

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

contact@wpscan.com

References

https://wpscan.com/vulnerability/cf7d1cea-0bf4-4b9e-bab4-71d5719a7c30/