PT-2024-23405 · WordPress · Bannerlid
CVSS v3.1
5.5
Medium
| Vector | AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
Bannerlid WordPress plugin versions 1.1.0 and earlier
Description
The issue is related to Reflected Cross-Site Scripting, which could be used against high privilege users such as administrators. This occurs because the plugin does not escape generated URLs before outputting them in attributes.
Recommendations
For Bannerlid WordPress plugin versions 1.1.0 and earlier, update to a version that fixes this issue to prevent Reflected Cross-Site Scripting attacks.
Exploit
Fix
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Bannerlid