CVE-2024-3917

CVE-2024-3917 is a Reflected Cross-Site Scripting (XSS) vulnerability in the Pet Manager WordPress plugin, affecting versions up to 1.4. This flaw allows an attacker to inject malicious scripts into a webpage due to improper sanitization of a parameter, which could then be executed in the browser of high-privilege users like administrators. Rated as MEDIUM severity with a CVSS score of 6.1, this vulnerability requires user interaction (UI:R) and can be exploited over the network (AV:N) with low attack complexity (AC:L). Successful exploitation could lead to information disclosure (C:L) and integrity compromise (I:L), though not denial of service (A:N). Currently, there is no evidence of active exploitation, and no public exploit code is available in Metasploit, Nuclei, or ExploitDB. The vulnerability has garnered minimal community discussion and media coverage, indicating low public awareness.