CVE-2024-32456

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in EnvoThemes Envo Extra allows Stored XSS.This issue affects Envo Extra: from n/a through 1.8.11...

CVE-2024-32456

CVE-2024-32456 corresponds to a Stored XSS in EnvoThemes Envo Extra (WordPress plugin). Affected: Envo Extra up to version 1.8.11. Root cause: Improper input handling during web page generation. Impact: Cross-site script execution via stored payload. Remediation status: patched (per provided conn...

CVE-2024-32456 WordPress Envo Extra plugin <= 1.8.11 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in EnvoThemes Envo Extra allows Stored XSS.This issue affects Envo Extra: from n/a through 1.8.11...

WordPress Envo Extra Plugin <= 1.8.11 is vulnerable to Cross Site Scripting (XSS)

Software Envo Extra Type Plugin Vulnerable versions = 1.8.11 Fixed in 1.8.12 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-32456 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 8daa7db6167d Credits Khalid Yusuf Required privilege Contribut...