Lucene search
+L

4 matches found

NVD
NVD
added 2024/03/27 12:15 p.m.13 views

CVE-2024-29813

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CartFlows Inc. Funnel Builder by CartFlows allows Stored XSS.This issue affects Funnel Builder by CartFlows: from n/a through 2.0.1...

5.9CVSS5.7AI score0.00359EPSS
Exploits0References1
CVE
CVE
added 2024/03/27 12:4 p.m.40 views

CVE-2024-29813

CVE-2024-29813 affects CartFlows Funnel Builder for WordPress, allowing Stored XSS via improper input handling during web page generation. Impact details are limited to Stored XSS with the affected range stated as n/a through 2.0.1; CVSS 3.1 base score 5.9. No fix version or remediation is provid...

5.9CVSS8.6AI score0.00359EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/03/27 12:4 p.m.27 views

CVE-2024-29813 WordPress CartFlows plugin <= 2.0.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CartFlows Inc. Funnel Builder by CartFlows allows Stored XSS.This issue affects Funnel Builder by CartFlows: from n/a through 2.0.1...

5.9CVSS5.9AI score0.00359EPSS
Exploits0References1
Patchstack
Patchstack
added 2024/03/25 12:0 a.m.11 views

WordPress Funnel Builder by CartFlows Plugin <= 2.0.1 is vulnerable to Cross Site Scripting (XSS)

Software Funnel Builder by CartFlows Type Plugin Vulnerable versions = 2.0.1 Fixed in 2.0.2 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-29813 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 52e759bcfda3 Credits LVT-tholv2k Required...

5.9CVSS6.9AI score0.00359EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder