Security Advisory
CVE-2024-10815
4.2
MEDIUM
Vulnerability Description
The PostLists WordPress plugin through 2.0.2 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers
Published Date
January 9, 2025
Official Source
NIST NVD Advisory