Vulnerabilities and Security Researches

Pz-LinkCard, CVE-2024-0672

CVE, Research URL: CVE-2024-0672
Home page URL: Security reports for Pz-LinkCard
Application: Pz-LinkCard
Published on: Mar 28, 2024
Research Description: The Pz-LinkCard WordPress plugin through 2.5.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
Affected versions: max 2.5.3.
Status: vulnerable