CVE-2024-4860

5.4MEDIUM

The 'WordPress RSS Aggregator' WordPress Plugin, versions < 4.23.9 are affected by a Cross-Site Scripting (XSS) vulnerability due to the lack of sanitization of the  'notice_id'  GET parameter.

发布于: 5/14/2024更新于: 3/25/2025
在NVD查看在MITRE查看

描述

The 'WordPress RSS Aggregator' WordPress Plugin, versions < 4.23.9 are affected by a Cross-Site Scripting (XSS) vulnerability due to the lack of sanitization of the  'notice_id'  GET parameter.

AI分析AI驱动

受影响产品

rebelcoderss_aggregator

参考资料