VYPR
Unrated severityNVD Advisory· Published Nov 6, 2024· Updated Nov 6, 2024

Wp-ImageZoom <= 1.1.0 - Reflected XSS

CVE-2024-9934

Description

The Wp-ImageZoom WordPress plugin through 1.1.0 does not sanitise and escape some parameters before outputting them back in a page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

1

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.