Wphobby ≫ Post Sync

1 vulnerability found

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.

6.1

CVE-2024-13634

Exploit

EPSS 0.05%
Published 26.02.2025 13:15:37
Last modified 20.05.2025 19:54:22

The Post Sync WordPress plugin through 1.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.