Approved changes feed: RSS · Atom

cpe:2.3:a:emarketdesign:request_a_quote:-:*:*:*:*:wordpress:*:*

part: a version: - update: *

VendorEmarketdesign (b9ab1411-a7e9-5c71-a733-b76a0082c2c2)
ProductRequest A Quote (7b4977c2-ccfd-5b6c-9817-965964c741fb)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-6231 vulnerable 2026-06-08 06:58:18.303954 Request a Quote < 2.4.1 - Admin+ Stored XSS
The Request a Quote WordPress plugin before 2.4.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
Published: 2024-07-23T06:00:02.805Z
Updated: 2024-08-01T21:33:05.375Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.