Skip to content
Sign in
6.1 Medium

CVE-2024-6019 The Music Request Manager WordPress plugin through 1.3 does not sanitise and escape incoming music requests, which could…

Description

The Music Request Manager WordPress plugin through 1.3 does not sanitise and escape incoming music requests, which could allow unauthenticated users to perform Cross-Site Scripting attacks against administrators

Affected products and versions

Product Affected versions Fixed in
Music Request Manager 1.3 earliest → 1.3 No fix stated
music_request_manager 1.3 earliest → 1.3 No fix stated

Other CVEs of Music Request Manager

The 3 CVEs of Music Request Manager →
CVE-2024-6017 The Music Request Manager WordPress plugin through 1.3 does not have CSRF check in some places, and is missing… 6.1 Medium CVE-2024-6018 The Music Request Manager WordPress plugin through 1.3 does not escape the $_SERVER['REQUEST_URI'] parameter before… 6.1 Medium
Track this CVE