CVE-2024-5730

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

The Pagerank tools WordPress plugin through 1.1.5 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
Unknown	Pagerank tools	<= 1.1.5
svenwagener	pagerank_tools	<= 1.1.5

References

https://wpscan.com/vulnerability/17482b2c-c9ba-480a-8000-879baf835af7/Exploit, Third Party Advisory
https://wpscan.com/vulnerability/17482b2c-c9ba-480a-8000-879baf835af7/Exploit, Third Party Advisory

Timeline

Published: Jun 28, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-57316.8A vulnerability in the IPS Manager, Central Manager, and Local Manager communication workflow allows an attacker to control the destination CVE-2024-57329.8A vulnerability was found in Clash up to 0.20.1 on Windows. It has been declared as critical. This vulnerability affects unknown code of the CVE-2024-573266.1A Reflected Cross-Site Scripting (XSS) vulnerability exists in the search.php file of the Online Pizza Delivery System 1.0. The vulnerabilit CVE-2024-573289.8A SQL Injection vulnerability exists in the login form of Online Food Ordering System v1.0. The vulnerability arises because the input field CVE-2024-573295.4HortusFox v3.9 contains a stored XSS vulnerability in the "Add Plant" function. The name input field does not sanitize or escape user inputs CVE-2024-57339.8A vulnerability was found in itsourcecode Online Discussion Forum 1.0. It has been rated as critical. This issue affects some unknown proces CVE-2024-573366.5Incorrect access control in M2Soft CROWNIX Report & ERS affected v7.x to v7.4.3.599 and v8.x to v8.0.3.79 allows unauthorized attackers to o CVE-2024-573376.5An arbitrary file upload vulnerability in the opcode 500 functionality of M2Soft CROWNIX Report & ERS v5.x to v5.5.14.1070, v7.x to v7.4.3.9 CVE-2024-573386.5An arbitrary file upload vulnerability in M2Soft CROWNIX Report & ERS v5.x to v5.5.14.1070, v7.x to v7.4.3.960, and v8.x to v8.2.0.345 allow CVE-2024-57348.8A vulnerability classified as critical has been found in itsourcecode Online Discussion Forum 1.0. Affected is an unknown function of the fi CVE-2024-573486.1Cross Site Scripting vulnerability in PecanProject pecan through v.1.8.0 allows a remote attacker to execute arbitrary code via the crafted CVE-2024-57357.5Full Path Disclosure vulnerability in AdmirorFrames Joomla! extension in afHelper.php script allows an unauthorised attacker to retrieve loc