{ "id": "CVE-2024-1273", "sourceIdentifier": "contact@wpscan.com", "published": "2024-03-11T18:15:17.900", "lastModified": "2024-03-12T12:40:13.500", "vulnStatus": "Awaiting Analysis", "descriptions": [ { "lang": "en", "value": "The Starbox WordPress plugin before 3.5.0 does not sanitise and escape some parameters, which could allow users with a role as low as Contributor to perform Cross-Site Scripting attacks" }, { "lang": "es", "value": "El complemento Starbox de WordPress anterior a 3.5.0 no sanitiza ni escapa a algunos par\u00e1metros, lo que podr\u00eda permitir a usuarios con un rol tan bajo como Colaborador realizar ataques de cross-site scripting" } ], "metrics": {}, "references": [ { "url": "https://wpscan.com/vulnerability/9784d7c8-e3aa-42af-ace8-5b2b37ebc9cb/", "source": "contact@wpscan.com" } ] }