CVE-2024-11811

The Feedify – Web Push Notifications plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'platform', 'phone', 'email', and 'storeurl' parameters. in all versions up to, and including, 2.4.2 due to insufficient input sanitization and output escaping. This makes it possible...

CVE-2024-11811

creationtimestamp| type| source ---|---|--- 2024-12-20 22:31:17+00:00| seen| https://infosec.exchange/users/cve/statuses/113687519380722182 2024-12-20 23:15:43+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldrjdq7oou22 2024-12-21 01:06:59+00:00| seen|...

CVE-2024-11811

The CVE CVE-2024-11811 affects the Feedify – Web Push Notifications WordPress plugin. It allows Reflected Cross-Site Scripting via parameters platform, phone, email, and store_url in all versions up to 2.4.2 due to insufficient input sanitization and output escaping. The vulnerability enables una...