Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The Property Hive WordPress plugin before 2.1.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
🚨 CVE-2024-12585 - medium 🚨 PropertyHive < 2.1.1 - Cross-Site Scripting > The Property Hive plugin for WordPress is vulnerable to Reflected Cross-Site Scriptin... 👾 https://cloud.projectdiscovery.io/library/CVE-2024-12585 @pdnuclei #NucleiTemplates #cve
Post summary
The text announces CVE-2024-12585 as a medium‑severity reflected XSS flaw affecting PropertyHive plugin versions below 2.1.1.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | wp-property-hive | propertyhive | - | wordpress | - |