CVE-2024-3963

The Giveaways and Contests by RafflePress WordPress plugin before 1.12.14 does not sanitise and escape some parameters, which could allow users with a role as low as editor to perform Cross-Site Scripting attacks

Score

CVSS 3.1 6.5 Medium

Status

Analyzed - contact@wpscan.com

Published

2024-07-13

Last modified

2024-08-01

Weaknesses

CWE-79

Affected products

• Giveaways And Contests By Rafflepress (Rafflepress)
• Rafflepress (Rafflepress)
• Giveaways And Contests By Rafflepress (Unknown)

References

• https://wpscan.com/vulnerability/827d738e-5369-431e-8438-b5c4d8c1f8f1/