CVE-2024-3048

Published Apr 26, 2024

Last updated 7 months ago

Overview

Description
The Bannerlid WordPress plugin through 1.1.0 does not escape generated URLs before outputting them in attributes, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as administrators
Source
contact@wpscan.com
NVD status
Awaiting Analysis

Social media

Hype score
Not currently trending