Hassan Khan Yusufzai
+1
·
Published
2025-01-27
·
Updated
2025-02-01
·
CVE-2024-13052
7.1
High
| Base vector | Vector | AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L |
Name of the Vulnerable Software and Affected Versions:
Dental Optimizer Patient Generator App WordPress plugin versions 1.0
Description:
The issue is related to a Reflected Cross-Site Scripting problem, where a `parameter` is not properly sanitised and escaped before being outputted back in the page. This could be exploited against high privilege users, such as administrators.
Recommendations:
Dental Optimizer Patient Generator App WordPress plugin version 1.0: Update the plugin to a version that properly sanitises and escapes parameters to prevent Reflected Cross-Site Scripting attacks.
Exploit
Fix
XSS