6.1
Moyenne
CVE-2024-6223 The Send email only on Reply to My Comment WordPress plugin through 1.0.6 does not sanitise and escape a parameter…
Description
The Send email only on Reply to My Comment WordPress plugin through 1.0.6 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Send email only on Reply to My Comment 1.0 | premières → 1.0.6 | Pas de correctif indiqué |
| send_email_only_on_reply_to_my_comment 1.0 | premières → 1.0.6 | Pas de correctif indiqué |