{"id":"CVE-2024-13574","summary":"XV Random Quotes \u003c= 1.40 - Reflected XSS","details":"The XV Random Quotes WordPress plugin through 1.40 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.","modified":"2026-08-12T03:51:34.163205384Z","published":"2025-03-11T06:00:05.181Z","database_specific":{"unresolved_ranges":[{"source":"AFFECTED_FIELD","extracted_events":[{"last_affected":"1.40"}]},{"extracted_events":[{"fixed":"1.40"}],"source":"DESCRIPTION"}],"cna_assigner":"WPScan","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/13xxx/CVE-2024-13574.json"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/13xxx/CVE-2024-13574.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-13574"},{"type":"EVIDENCE","url":"https://wpscan.com/vulnerability/7eb9ef20-5d34-425e-b7fc-38a769d0a822/"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/xavivars/xv-random-quotes","events":[{"introduced":"0"},{"last_affected":"383bc42962e2f9f678cbd7f9a42901dee60a514a"}],"database_specific":{"cpe":"cpe:2.3:a:xavivars:xv_random_quotes:*:*:*:*:*:wordpress:*:*","extracted_events":[{"introduced":"0"},{"last_affected":"1.40"}],"source":"CPE_RANGE"}}],"versions":["1.40","1.38","1.37","1.36","1.35","1.34","1.32","1.31","1.30","1.29","1.28","1.27","1.26","1.25","1.24","1.22","1.21","1.20","1.12","1.11","XV-Random-Quotes","1.10","StrayQuotesZ","1.9.9z3","1.9.9","1.9.7","1.9.4","1.9.5","1.9.6","1.9.2","1.8.9","1.9.0","1.8.6","1.8.5","1.8.2","1.8.3","1.7.9","1.7.9_fix","1.8.1","1.7.1","1.7.3","1.7.4","1.7.5","1.7.6","1.7.7","1.7.8","1.7","1.53","1.6","1.6.2","1.6.3","1.6.4","1.51","1.52","1.50","1.48","1.3","1.2","1.0","1.1"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-13574.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L"}]}