CVE-2024-13347

Essential WP Real Estate <= 1.1.3 - Reflected XSS PUBLISHED

Description (CNA)

The Essential WP Real Estate WordPress plugin through 1.1.3 does not escape generated URLs before outputting them in attributes, leading to Reflected Cross-Site Scripting.

Affected (CNA)

Vendor / product	Versions
Unknown / Essential WP Real Estate	affected 0 through 1.1.3

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/e2f97636-4c67-409a-83c6-ad6255aa2cc5/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.