Lucene search
+L

5 matches found

redhatcve
redhatcve
added 2025/02/05 12:49 a.m.7 views

CVE-2024-37416

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in J.N. Breetvelt a.K.A. OpaJaap WP Photo Album Plus allows Reflected XSS.This issue affects WP Photo Album Plus: from n/a through 8.8.00.002...

7.1CVSS6.9AI score0.00332EPSS
Exploits0
cvelist
cvelist
added 2024/07/22 8:31 a.m.28 views

CVE-2024-37416 WordPress WP Photo Album Plus plugin <= 8.8.00.002 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in J.N. Breetvelt a.K.A. OpaJaap WP Photo Album Plus allows Reflected XSS.This issue affects WP Photo Album Plus: from n/a through 8.8.00.002...

7.1CVSS0.00332EPSS
Exploits0References1
vulnrichment
vulnrichment
added 2024/07/22 8:31 a.m.12 views

CVE-2024-37416 WordPress WP Photo Album Plus plugin <= 8.8.00.002 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in J.N. Breetvelt a.K.A. OpaJaap WP Photo Album Plus allows Reflected XSS.This issue affects WP Photo Album Plus: from n/a through 8.8.00.002...

7.1CVSS7AI score0.00332EPSS
Exploits0References1
cve
cve
added 2024/07/22 8:31 a.m.52 views

CVE-2024-37416

CVE-2024-37416 is an XSS vulnerability (Reflected XSS) in WordPress WP Photo Album Plus, caused by Improper Neutralization of Input During Web Page Generation. Affected: WP Photo Album Plus up to version 8.8.00.002. The provided connected sources confirm the issue and describe the vulnerability c...

7.1CVSS7AI score0.00332EPSS
Exploits0References1Affected Software1
patchstack
patchstack
added 2024/06/28 12:0 a.m.14 views

WordPress WP Photo Album Plus Plugin <= 8.8.00.002 is vulnerable to Cross Site Scripting (XSS)

Software WP Photo Album Plus Type Plugin Vulnerable versions = 8.8.00.002 Fixed in 8.8.00.003 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-37416 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID b2c09f1a99da Credits stealthcopter...

7.1CVSS6.6AI score0.00332EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder