Lucene search
+L

24 matches found

NVD
NVD
added 2024/06/04 3:15 p.m.27 views

CVE-2024-35651

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Spiffy Plugins WP Flow Plus allows Stored XSS.This issue affects WP Flow Plus: from n/a through 5.2.2...

6.5CVSS6.4AI score0.00254EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/06/04 2:15 p.m.37 views

CVE-2024-35651 WordPress WP Flow Plus plugin <= 5.2.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Spiffy Plugins WP Flow Plus allows Stored XSS.This issue affects WP Flow Plus: from n/a through 5.2.2...

6.5CVSS5.8AI score0.00254EPSS
Exploits0References1
Patchstack
Patchstack
added 2024/06/03 1:32 p.m.5 views

WordPress WP Flow Plus plugin <= 5.2.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by LVT-tholv2k Patchstack Alliance in WordPress Plugin WP Flow Plus versions = 5.2.2...

6.5CVSS6.1AI score0.00254EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2024/06/03 12:0 a.m.16 views

WordPress WP Flow Plus Plugin <= 5.2.2 is vulnerable to Cross Site Scripting (XSS)

Software WP Flow Plus Type Plugin Vulnerable versions = 5.2.2 Fixed in 5.2.3 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-35651 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID bcb093c2f536 Credits LVT-tholv2k Required privilege Contributo...

6.5CVSS6.6AI score0.00254EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder