CVE-2024-3963
EUVD-2024-3252913.07.2024, 06:15
The Giveaways and Contests by RafflePress WordPress plugin before 1.12.14 does not sanitise and escape some parameters, which could allow users with a role as low as editor to perform Cross-Site Scripting attacks
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| rafflepress | rafflepress | 𝑥 < 1.12.14 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| rafflepress | giveaways_and_contests_by_rafflepress | 𝑥 < 1.12.14 | ADP |