cve,link,title,description,vendor,products,score,severity,epss,cisa,cisa_published,article,ransomware,exploited,exploited_date,poc,trended,trended_no_1,trended_no_1_date,published,trended_score CVE-2024-13221,https://securityvulnerability.io/vulnerability/CVE-2024-13221,Reflected Cross-Site Scripting Vulnerability in Fantastic ElasticSearch Plugin for WordPress,"The Fantastic ElasticSearch WordPress plugin, up to version 4.1.0, exhibits a vulnerability where a parameter is not properly sanitized and escaped before being rendered on the page. This oversight allows for the possibility of reflected Cross-Site Scripting (XSS) attacks, particularly targeting users with elevated privileges, such as administrators. Successful exploitation of this vulnerability could result in unauthorized actions or information disclosure within the WordPress site.",WordPress,Fantastic Elastic,6.1,MEDIUM,0.0004299999854993075,false,,false,false,true,2025-01-31T06:00:15.000Z,true,false,false,,2025-01-31T06:00:15.775Z,0