CVE-2024-35639

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Webliberty Simple Spoiler simple-spoiler.This issue affects Simple Spoiler: from n/a through = 1.2...

CVE-2024-35639 WordPress Simple Spoiler plugin <= 1.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Webliberty Simple Spoiler simple-spoiler.This issue affects Simple Spoiler: from n/a through = 1.2...

CVE-2024-35639 WordPress Simple Spoiler plugin <= 1.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Webliberty Simple Spoiler simple-spoiler.This issue affects Simple Spoiler: from n/a through = 1.2...

CVE-2024-35639

CVE-2024-35639 affects the WordPress plugin Simple Spoiler (Webliberty) up to version 1.2. The vulnerability is a stored XSS via admin/settings context, enabling injected scripts in pages viewed by users. Severity is cited as low (CVSS 3.1/3.1: 5.9), and exploitation is described as unlikely. The...

WordPress Simple Spoiler Plugin <= 1.2 is vulnerable to Cross Site Scripting (XSS)

Software Simple Spoiler Type Plugin Vulnerable versions = 1.2 Fixed in 1.3 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-35639 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID c046b9bc81be Credits Cronus Required privilege Administrator...