CVE-2024-12475

The WP Multi Store Locator plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 2.4.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inje...

CVE-2024-12475

The WP Multi Store Locator plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 2.4.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inje...

CVE-2024-12475

creationtimestamp| type| source ---|---|--- 2025-01-04 11:21:10+00:00| seen| https://infosec.exchange/users/cve/statuses/113769818837566127 2025-01-04 12:15:42+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lew3hdtofh2m 2025-01-04 12:42:25+00:00| seen|...