CVE-2024-4977
Index WP MySQL For Speed < 1.4.18 - Admin+ Reflected XSS
MEDIUM 6.8EPSS 0.5%
The Index WP MySQL For Speed WordPress plugin before 1.4.18 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
- Affected
- Index WP MySQL For Speed
- CVSS v3.1 CNA
- 6.8 MEDIUM
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:L - EPSS
- 0.50% chance of exploitation in the next 30 days, 41st percentile
- Published
- 2024-07-13
- Updated
- 2024-08-01