CVE-2024-56260

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in StorePlugin ShopElement shopelement allows Stored XSS.This issue affects ShopElement: from n/a through = 2.0.0...

CVE-2024-56260

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in StorePlugin ShopElement shopelement allows Stored XSS.This issue affects ShopElement: from n/a through = 2.0.0...

CVE-2024-56260

CVE-2024-56260 is a Stored XSS in the ShopElement plugin (authenticated) affecting ShopElement versions from n/a up to 2.0.0. The initial description notes Cross-site Scripting in StorePlugin ShopElement; the connected Red Hat and Wordfence entries confirm the vulnerability pattern (authenticated...

PT-2025-3225

Name of the Vulnerable Software and Affected Versions StorePlugin ShopElement versions prior to 2.0.0 Description The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means that an attacker can inject malicious...