This site currently shows sample data for demonstration.
BDVDB
বাংলা

Vulnerabilities

CVE-2024-53278 | BDVDB-2026-257021 Detail

gqevu6bsizWP Admin UI Customize

Description#

Cross-site scripting vulnerability exists in WP Admin UI Customize versions prior to ver 1.5.14. If a malicious admin user customizes the admin screen with some malicious contents, an arbitrary script may be executed on the web browser of the other users who are accessing the admin screen.

Impact#

Per CVSS v3.0: confidentiality impact low, integrity impact low, availability impact none. Attack vector: network.

Weaknesses#

  • CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.