CVE-2024-0187

Community by PeepSo < 6.3.1.2 - Reflected XSS

Medium · published January 16, 2024

CVSS v3.1
6.1
EPSS
1%
Percentile
43.0
In the wild
Unconfirmed
What it is

The Community by PeepSo WordPress plugin before 6.3.1.2 does not sanitise and escape various parameters and generated URLs before outputting them back attributes, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin

The record
Technical detail
CVSS v3.1
6.1 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00515 · 43.0th percentile
Published
2024-01-16T15:57Z
EPSS history
Timeline
  • 16 JAN 15:57Z
    Community by PeepSo < 6.3.1.2 - Reflected XSS
    cvelistv5