Skip to content
Sign in
4.8 Medium

CVE-2024-3918 The Pet Manager WordPress plugin through 1.4 does not sanitise and escape some of its Pet settings, which could allow…

Description

The Pet Manager WordPress plugin through 1.4 does not sanitise and escape some of its Pet settings, which could allow high privilege users such as Contributor to perform Stored Cross-Site Scripting attacks.

Affected products and versions

Product Affected versions Fixed in
Pet Manager 1.4 earliest → 1.4 No fix stated

Other CVEs of Pet Manager

The 2 CVEs of Pet Manager →
CVE-2024-3917 The Pet Manager WordPress plugin through 1.4 does not sanitise and escape a parameter before outputting it back in the… 6.1 Medium
Track this CVE