VR-Frases (collect & share quotes), CVE-2024-13626

CVE, Research URL: CVE-2024-13626
Home page URL: Security reports for VR-Frases (collect & share quotes)
Application: VR-Frases (collect & share quotes)
Published on: Feb 17, 2025
Research Description: The VR-Frases (collect & share quotes) WordPress plugin through 3.0.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.
Affected versions: Min -, max 3.0.1.
Status: vulnerable

VR-Frases (collect &amp; share quotes), CVE-2024-13626