CVE-2024-3963 — RafflePress Lite < 1.12.14 - Editor+ Stored XSS
The Giveaways and Contests by RafflePress WordPress plugin before 1.12.14 does not sanitise and escape some parameters, which could allow users with a role as low as editor to …
Published: 2024-07-13 · CVSS: 6.5 · CVSS 3.1
The Giveaways and Contests by RafflePress WordPress plugin before 1.12.14 does not sanitise and escape some parameters, which could allow users with a role as low as editor to perform Cross-Site Scripting attacks
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7