CVE-2024-2000

The Premium Addons PRO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'navigationdots' parameter of the Multi Scroll Widget in all versions up to, and including, 2.9.12 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

CVE-2024-2000

CVE-2024-2000 affects the WordPress plugin Premium Addons PRO. The issue is stored XSS via the Multi Scroll Widget’s navigation_dots parameter due to insufficient input sanitization and output escaping, impacting all versions up to and including 2.9.12. authenticated users with contributor-level ...