/Vulnerability Library

WP DeskLite - Reflected XSS

CVE-2024-12724
Verified

Description

WP DeskLite WordPress plugin through 1.0.0 contains a reflected XSS caused by unsanitized and unescaped parameter output, letting attackers execute scripts against high privilege users such as admin, exploit requires crafted request.

Severity

Medium

CVSS Score

6.1

Exploit Probability

1%

Affected Product

wp_desklite

Published Date

February 6, 2026

Template Author

sourabh-sahu

CVE-2024-12724.yaml
6.1Score

CVSS Metrics

CVSS Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVE ID:
cve-2024-12724
CWE ID:
cwe-79

References

https://wpscan.com/vulnerability/9dd3ffaa-9020-47a6-bf9a-7e1412b9e9d5/https://nvd.nist.gov/vuln/detail/CVE-2024-12724

Remediation Steps

Update to the latest version with proper input sanitization and escaping.