CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-13633

The Simple catalogue WordPress plugin through 1.0.2 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 25.4%

CVSS Severity

CVSS v3 Score 7.1

References

https://wpscan.com/vulnerability/4291d5eb-c006-42b0-accf-90f09f26b6a0/

Products affected by CVE-2024-13633

Fb-Creations » Simple Catalogue » Version: N/A

cpe:2.3:a:fb-creations:simple_catalogue:-
Fb-Creations » Simple Catalogue » Version: 0.1

cpe:2.3:a:fb-creations:simple_catalogue:0.1
Fb-Creations » Simple Catalogue » Version: 0.2

cpe:2.3:a:fb-creations:simple_catalogue:0.2
Fb-Creations » Simple Catalogue » Version: 1.0.0

cpe:2.3:a:fb-creations:simple_catalogue:1.0.0
Fb-Creations » Simple Catalogue » Version: 1.0.1

cpe:2.3:a:fb-creations:simple_catalogue:1.0.1
Fb-Creations » Simple Catalogue » Version: 1.0.2

cpe:2.3:a:fb-creations:simple_catalogue:1.0.2

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-13633

Products

Pricing

Contact Us