Geocache Stat Bar Widget

1 CVEs product

Monthly

CVE-2024-11266 MEDIUM POC Monitor

The Geocache Stat Bar Widget WordPress plugin through 0.911 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

WordPress XSS Geocache Stat Bar Widget
NVD WPScan
CVSS 3.1
4.8
EPSS
0.2%
EPSS 0% CVSS 4.8
MEDIUM POC Monitor

The Geocache Stat Bar Widget WordPress plugin through 0.911 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

WordPress XSS Geocache Stat Bar Widget
NVD WPScan

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy