3 matches found
CVE-2024-11457
The Feedpress Generator – External RSS Frontend Customizer plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'tab' parameter in all versions up to, and including, 1.2.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticate...
CVE-2024-11457
creationtimestamp| type| source ---|---|--- 2024-12-07 11:16:21+00:00| seen| https://infosec.exchange/users/cve/statuses/113611255352925843 2024-12-07 14:12:33+00:00| seen| https://t.me/cvedetector/12321...
CVE-2024-11457 Feedpress Generator – External RSS Frontend Customizer <= 1.2.1 - Reflected Cross-Site Scripting
The Feedpress Generator – External RSS Frontend Customizer plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'tab' parameter in all versions up to, and including, 1.2.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticate...