CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-10152

The Simple Certain Time to Show Content WordPress plugin before 1.3.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 22.5%

CVSS Severity

CVSS v3 Score 7.1

References

https://wpscan.com/vulnerability/b4d17da2-4c47-4fd1-a6bd-6692b07cf710/

Products affected by CVE-2024-10152

Elementengage » Simple Certain Time To Show Content » Version: 1.1.0

cpe:2.3:a:elementengage:simple_certain_time_to_show_content:1.1.0
Elementengage » Simple Certain Time To Show Content » Version: 1.2.0

cpe:2.3:a:elementengage:simple_certain_time_to_show_content:1.2.0
Elementengage » Simple Certain Time To Show Content » Version: 1.2.1

cpe:2.3:a:elementengage:simple_certain_time_to_show_content:1.2.1
Elementengage » Simple Certain Time To Show Content » Version: 1.2.2

cpe:2.3:a:elementengage:simple_certain_time_to_show_content:1.2.2

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-10152

Products

Pricing

Contact Us