Skip to content
Sign in
4.8 Medium

CVE-2024-3822 The Base64 Encoder/Decoder WordPress plugin through 0.9.2 does not sanitise and escape a parameter before outputting…

Description

The Base64 Encoder/Decoder WordPress plugin through 0.9.2 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin

Affected products and versions

Product Affected versions Fixed in
Base64 Encoder/Decoder 0.9 earliest → 0.9.2 No fix stated

Other CVEs of Base64 Encoder/Decoder

The 3 CVEs of Base64 Encoder/Decoder →
CVE-2024-3823 The Base64 Encoder/Decoder WordPress plugin through 0.9.2 does not have CSRF check when updating its settings, and is… 2.4 Low CVE-2024-3824 The Base64 Encoder/Decoder WordPress plugin through 0.9.2 does not have CSRF check in place when resetting its settings,… 5.5 Medium
Track this CVE