Guten Free Options - Cross Site Scripting
CVE-2024-13492
Verified
Description
Guten Free Options WordPress plugin <= 0.9.5 contains a reflected cross-site scripting caused by unsanitized parameter output, letting attackers execute malicious scripts in high privilege users' browsers, exploit requires victim to click malicious link.
Severity
Medium
CVSS Score
6.1
Exploit Probability
1%
Affected Product
guten_free_options
Published Date
February 6, 2026
Template Author
sourabh-sahu
CVE-2024-13492.yaml
6.1Score
CVSS Metrics
CVSS Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVE ID:
cve-2024-13492
CWE ID:
cwe-79
Remediation Steps
Update to the latest version of the plugin where the issue is fixed.