cve,link,title,description,vendor,products,score,severity,epss,cisa,cisa_published,article,ransomware,exploited,poc,trended,trended_no_1,published,trended_score
CVE-2024-9375,https://securityvulnerability.io/vulnerability/CVE-2024-9375,WordPress Captcha Plugin Vulnerable to Reflected Cross-Site Scripting,"The Captcha Bank plugin for WordPress contains a vulnerability that allows for Reflected Cross-Site Scripting (XSS). This issue arises from the incorrect implementation of the add_query_arg function, which lacks proper escaping on URLs. The flaw enables potential attackers, who do not need to authenticate, to craft malicious scripts that, upon clicking a deceivingly harmless link, could execute within the context of a user’s session. Such exploits not only compromise the integrity of web applications but also threaten the privacy and security of end-users.",Wordpress,Captcha Bank,6.1,MEDIUM,0.0004600000102072954,false,,false,false,false,,false,false,2024-10-04T05:15:00.000Z,0