CVE-2024-3966 — Pray For Me <= 1.0.4 - Unauthenticated Stored XSS
The Pray For Me WordPress plugin through 1.0.4 does not sanitise and escape some parameters, which could unauthenticated visitors to perform Cross-Site Scripting attacks that tr…
Published: 2024-06-14 · CVSS: 6.1 · CVSS 3.1
The Pray For Me WordPress plugin through 1.0.4 does not sanitise and escape some parameters, which could unauthenticated visitors to perform Cross-Site Scripting attacks that trigger when an admin visits the Prayer Requests in the WP Admin
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7