Plugin Sanitization Vulnerability Affects User Display Names

CVE-2024-6792

Currently unrated 🤨

Key Information

Vendor: WP ULike
Status: WP Ulike
Vendor: CVE Published:; 6 September 2024

Summary

The WP ULike WordPress plugin before 4.7.2.1 does not properly sanitize user display names when rendering on a public page.

Affected Version(s)

WP ULike < 4.7.2.1

Timeline

Vulnerability published.
Sep 6, 2024
Vulnerability Reserved.
Jul 16, 2024

Collectors

NVD DatabaseMitre Database

Credit

stealthcopter

WPScan

.