cve/2024/CVE-2024-3963.md
2024-08-11 18:44:53 +00:00

811 B

CVE-2024-3963

Description

The Giveaways and Contests by RafflePress WordPress plugin before 1.12.14 does not sanitise and escape some parameters, which could allow users with a role as low as editor to perform Cross-Site Scripting attacks

POC

Reference

Github