Lucene search
HistoryJun 04, 2024 - 6:15 a.m.
CVE-2024-4749
cve-2024-4749
reflected cross-site scripting
wp-emember wordpress plugin
CVSS3
8.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L
AI Score
9.2
Confidence
High
EPSS
0
Percentile
9.0%
The wp-eMember WordPress plugin before 10.3.9 does not sanitize and escape the “fieldId” parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting.
Related
wpexploit
wpexploit
WP eMember < 10.3.9 - Reflected XSS
2024-05-14 00:00:00
wpvulndb
wpvulndb
WP eMember < 10.3.9 - Reflected Cross-Site Scripting
2024-05-31 00:00:00
WP eMember < 10.3.9 - Reflected XSS
2024-05-14 00:00:00
cvelist
cvelist
CVE-2024-4749 WP eMember < 10.3.9 - Reflected XSS
2024-06-04 06:00:02
cve
cve
CVE-2024-4749
2024-06-04 06:15:11
vulnrichment
vulnrichment
CVE-2024-4749 WP eMember < 10.3.9 - Reflected XSS
2024-06-04 06:00:02
wordfence
wordfence
CVSS3
8.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L
AI Score
9.2
Confidence
High
EPSS
0
Percentile
9.0%
Related for NVD:CVE-2024-4749