CVE-2024-3048
26.04.2024, 05:15
The Bannerlid WordPress plugin through 1.1.0 does not escape generated URLs before outputting them in attributes, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as administrators
| Vendor | Product | Version |
|---|---|---|
| web_lid | bannerlid | 𝑥 ≤ 1.1.0 |
𝑥
= Vulnerable software versions