CVE-2024-27991

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SupportCandy allows Stored XSS.This issue affects SupportCandy: from n/a through 3.2.3...

CVE-2024-27991 WordPress SupportCandy plugin <= 3.2.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SupportCandy allows Stored XSS.This issue affects SupportCandy: from n/a through 3.2.3...

WordPress SupportCandy Plugin <= 3.2.3 is vulnerable to Cross Site Scripting (XSS)

Software SupportCandy Type Plugin Vulnerable versions = 3.2.3 Fixed in 3.2.4 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-27991 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 64d8fa37173c Credits Mochamad Sofyan Required privilege...