Analysis and contextual insights are available on OpenCVE Cloud.
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2025-6749 | The Link My Posts WordPress plugin through 1.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. |
Tue, 08 Apr 2025 21:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Gunnettmd
Gunnettmd linkmyposts |
|
| Weaknesses | CWE-79 | |
| CPEs | cpe:2.3:a:gunnettmd:linkmyposts:1.0:*:*:*:*:wordpress:*:* | |
| Vendors & Products |
Gunnettmd
Gunnettmd linkmyposts |
Thu, 20 Mar 2025 20:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
cvssV3_1
|
Thu, 20 Mar 2025 06:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | The Link My Posts WordPress plugin through 1.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. | |
| Title | LinkMyPosts <= 1.0 - Reflected XSS | |
| References |
|
Status: PUBLISHED
Assigner: WPScan
Published:
Updated: 2025-03-20T19:30:08.203Z
Reserved: 2025-02-14T18:50:30.924Z
Link: CVE-2024-13881
Updated: 2025-03-20T19:29:49.222Z
Status : Analyzed
Published: 2025-03-20T06:15:22.317
Modified: 2026-06-17T07:02:54.887
Link: CVE-2024-13881
No data.
OpenCVE Enrichment
No data.
EUVD