cleantalk
Vulnerabilities and Security Researches

Giveaways and Contests by RafflePress – Get More Website Traffic, Email Subscribers, and Social Followers, CVE-2024-3963

CVE, Research URL

CVE-2024-3963

Published on
Jul 13, 2024
Research Description
The Giveaways and Contests by RafflePress WordPress plugin before 1.12.14 does not sanitise and escape some parameters, which could allow users with a role as low as editor to perform Cross-Site Scripting attacks
Affected versions
Min -, max 1.12.14.
Status
vulnerable