CVE-2024-6019

6.1 mediumEPSS 0.4%

Medium (6.1) in scriptonite music request manager. EPSS 0.4% chance of exploitation in the next 30 days.

The Music Request Manager WordPress plugin through 1.3 does not sanitise and escape incoming music requests, which could allow unauthenticated users to perform Cross-Site Scripting attacks against administrators

Severity

CVSS 3.1

6.1 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 30% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2024-09-12
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

scriptonite:music_request_manager

References

https://wpscan.com/vulnerability/5899c5c9-a550-4c86-a41d-7fcc1e84a7d3/

Check your stack JSON