CVE-2024-11363

creationtimestamp| type| source ---|---|--- 2025-01-07 04:38:38+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/320 2025-01-07 05:15:38+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4vexs5yo25...

CVE-2024-11363 Same but Different – Related Posts by Taxonomy <= 1.0.16 - Reflected Cross-Site Scripting

The Same but Different – Related Posts by Taxonomy plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg & removequeryarg without appropriate escaping on the URL in all versions up to, and including, 1.0.16. This makes it possible for unauthenticated...