6.8
Moyenne
CVE-2024-13347 The Essential WP Real Estate WordPress plugin through 1.1.3 does not escape generated URLs before outputting them in…
Description
The Essential WP Real Estate WordPress plugin through 1.1.3 does not escape generated URLs before outputting them in attributes, leading to Reflected Cross-Site Scripting.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Essential WP Real Estate 1.1 | premières → 1.1.3 | Pas de correctif indiqué |