exploitDog

CVE-2024-52494

Опубликовано: 02 дек. 2024

Источник: nvd

CVSS3: 5.9

EPSS Низкий

Описание

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Matt Varone, Tim Berneman Dynamic "To Top" allows Stored XSS.This issue affects Dynamic "To Top": from 3.5.2 through n/a.

Ссылки

https://patchstack.com/database/wordpress/plugin/dynamic-to-top/vulnerability/wordpress-dynamic-to-top-plugin-3-5-2-cross-site-scripting-xss-vulnerability?_s_id=cve

EPSS

Процентиль: 15%

0.00049

Низкий

5.9 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

GHSA-p8p6-69x2-5wqg

CVSS3: 5.9

github

около 1 года назад

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Matt Varone, Tim Berneman Dynamic "To Top" allows Stored XSS.This issue affects Dynamic "To Top": from 3.5.2 through n/a.

EPSS

Процентиль: 15%

0.00049

Низкий

5.9 Medium

CVSS3

Дефекты

CWE-79