~/products/wp-publications_project/wp-publications

pipeline liveDigest Docs

Wp-Publications Project Wp-Publications vulnerabilities

1 known vulnerability affecting wp-publications_project/wp-publications.

Total CVEs

1

CISA KEV

0

Public exploits

1

Exploited in wild

0

Severity breakdown

MEDIUM1

Vulnerabilities

SortPage 1 of 1

CVE-2024-11605P4MEDIUMCVSS 4.8PoC≤ 1.22024-12-27

CVE-2024-11605 [MEDIUM] CWE-79 CVE-2024-11605: The wp-publications WordPress plugin through 1.2 does not escape filenames before outputting them ba The wp-publications WordPress plugin through 1.2 does not escape filenames before outputting them back in the page, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).

Wp-Publications Project Wp-Publications vulnerabilities | cvebase