CVE-2024-11329

creationtimestamp| type| source ---|---|--- 2024-12-07 01:59:48+00:00| seen| https://infosec.exchange/users/cve/statuses/113609066916483610 2024-12-07 04:10:52+00:00| seen| https://t.me/cvedetector/12309...

CVE-2024-11329

CVE-2024-11329 affects the WordPress plugin Comfino Payment Gateway up to version 4.1.1. It is a Reflected Cross-Site Scripting vulnerability caused by using add_query_arg and remove_query_arg without proper URL escaping, allowing unauthenticated attackers to inject scripts in pages triggered by ...