CVE-2024-5627

{"id": "CVE-2024-5627", "cveTags": [], "metrics": {}, "published": "2024-07-13T06:15:05.170", "references": [{"url": "https://wpscan.com/vulnerability/5b18dc3d-0d5f-44e9-b22f-48ea0a9c9193/", "source": "contact@wpscan.com"}], "vulnStatus": "Awaiting Analysis", "descriptions": [{"lang": "en", "value": "The Tournamatch WordPress plugin before 4.6.1 does not sanitise and escape some parameters, which could allow users with a role as low as subscriber to perform Cross-Site Scripting attacks."}, {"lang": "es", "value": "El complemento Tournamatch de WordPress anterior a 4.6.1 no sanitiza ni escapa a algunos par\u00e1metros, lo que podr\u00eda permitir a los usuarios con un rol tan bajo como el de suscriptor realizar ataques de cross-site scripting."}], "lastModified": "2024-07-15T13:00:34.853", "sourceIdentifier": "contact@wpscan.com"}