cve/2024/CVE-2024-5627.md
2024-07-25 21:25:12 +00:00

736 B

CVE-2024-5627

Description

The Tournamatch WordPress plugin before 4.6.1 does not sanitise and escape some parameters, which could allow users with a role as low as subscriber to perform Cross-Site Scripting attacks.

POC

Reference

Github

No PoCs found on GitHub currently.