Analysis and contextual insights are available on OpenCVE Cloud.
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2024-51309 | The Dyn Business Panel WordPress plugin through 1.0.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. |
Wed, 07 May 2025 19:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Phycticio
Phycticio dyn Business Panel |
|
| Weaknesses | CWE-79 | |
| CPEs | cpe:2.3:a:phycticio:dyn_business_panel:1.0.0:*:*:*:*:*:*:* | |
| Vendors & Products |
Phycticio
Phycticio dyn Business Panel |
Mon, 27 Jan 2025 20:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
cvssV3_1
|
Mon, 27 Jan 2025 06:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | The Dyn Business Panel WordPress plugin through 1.0.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. | |
| Title | Dyn Business Panel <= 1.0.0 - Reflected XSS | |
| References |
|
Status: PUBLISHED
Assigner: WPScan
Published:
Updated: 2025-01-27T20:03:54.415Z
Reserved: 2024-12-30T19:38:13.627Z
Link: CVE-2024-13055
Updated: 2025-01-27T20:03:47.492Z
Status : Analyzed
Published: 2025-01-27T06:15:23.043
Modified: 2025-05-07T19:03:59.043
Link: CVE-2024-13055
No data.
OpenCVE Enrichment
No data.
EUVD