Medium severity5.5NVD Advisory· Published Apr 26, 2024· Updated Jun 17, 2026
CVE-2024-3048
CVE-2024-3048
Description
The Bannerlid WordPress plugin through 1.1.0 does not escape generated URLs before outputting them in attributes, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as administrators
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- WordPress/Bannerliddescription
Patches
Vulnerability mechanics
References
1- wpscan.com/vulnerability/e179ff7d-137c-48bf-8b18-e874e3f876f4/nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.