WordPress Front End Users plugin <= 3.2.32 contains a reflected cross-site scripting caused by lack of sanitization and escaping of a parameter before outputting it in the page, letting attackers execute malicious scripts in the context of high privilege users, exploit requires attacker to craft a malicious link or request. [已公开] id: CVE-2024-13569 info: name: WordPress Front End Users - Reflected XSS author: Sourabh-Sahu severity: high description: | WordPress Front End Users plugin <= 3.2.32 contains a reflected cross-site scripting caused by lack of sanitization and escaping of a parameter before outputting it in the page, letting attackers execute malicious scripts in the context of high privilege users, exploit requires attacker to craft a malicious link or request. impact: | Attackers can execute malicious scripts in the context of high privilege users, potentially leading to session hijacking or account compromise. remediation: | Update to the latest version of the plugin where the issue is fixed or apply security patches that sanitize and escape output properly. reference: - https://wpscan.com/vulnerability/b9742440-0e36-4900-b58e-41c9854a62b2/ classification: cvss-metrics:

未知

POC: 已公开