cve,link,title,description,vendor,products,score,severity,epss,cisa,cisa_published,article,ransomware,exploited,exploited_date,poc,trended,trended_no_1,trended_no_1_date,published,trended_score
CVE-2024-13225,https://securityvulnerability.io/vulnerability/CVE-2024-13225,Reflected Cross-Site Scripting Vulnerability in ECT Home Page Products Plugin for WordPress,"The ECT Home Page Products plugin for WordPress, up to version 1.9, is susceptible to a reflected cross-site scripting (XSS) vulnerability. This occurs due to improper sanitization and escaping of parameters before rendering them on the web page. Attackers could exploit this flaw to inject malicious scripts, potentially targeting high privilege users, including administrators. Such exploitation could compromise the security of the website and its users, making it crucial for operators to update their plugin to the latest version and apply necessary security measures.",WordPress,Ect Home Page Products,6.1,MEDIUM,0.0004299999854993075,false,,false,false,true,2025-01-31T06:00:16.000Z,true,false,false,,2025-01-31T06:00:16.734Z,0