cve,link,title,description,vendor,products,score,severity,epss,cisa,cisa_published,article,ransomware,exploited,poc,trended,trended_no_1,published,trended_score
CVE-2024-11684,https://securityvulnerability.io/vulnerability/CVE-2024-11684,Mollie Plugin Vulnerable to Reflected Cross-Site Scripting,"The Kudos Donations plugin for WordPress has a vulnerability related to Reflected Cross-Site Scripting (XSS) due to improper input sanitization and output escaping. An attacker could exploit the vulnerability via the 's' parameter, enabling them to inject malicious scripts into web pages. This scenario becomes critical when an unsuspecting user interacts with a manipulated link, potentially leading to session hijacking or unauthorized actions. All versions up to and including 3.2.9 are affected, highlighting the importance of updating to version 3.3.0 or later to mitigate this risk.",Wordpress,Kudos Donations – Easy Donations And Payments With Mollie,6.1,MEDIUM,0.0005200000014156103,false,,false,false,false,,false,false,2024-11-28T08:47:35.804Z,0
CVE-2024-11685,https://securityvulnerability.io/vulnerability/CVE-2024-11685,Easy Donations Plugin Vulnerable to Cross-Site Scripting,"The `Kudos Donations – Easy donations and payments with Mollie` plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of `add_query_arg` without appropriate escaping on the URL in all versions up to, and including, 3.2.9. This makes it possible for unauthenticated attackers to inject arbitrary web scripts that execute if they can successfully trick a user into performing an action, such as clicking on a specially crafted link.",Wordpress,Kudos Donations – Easy Donations And Payments With Mollie,6.1,MEDIUM,0.0004600000102072954,false,,false,false,false,,false,false,2024-11-28T08:47:34.138Z,0