CVE-2024-37561

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Jamie Bergen Plugin Notes Plus allows Stored XSS.This issue affects Plugin Notes Plus: from n/a through 1.2.6...

CVE-2024-37561 WordPress Plugin Notes Plus plugin <= 1.2.6 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Jamie Bergen Plugin Notes Plus allows Stored XSS.This issue affects Plugin Notes Plus: from n/a through 1.2.6...

CVE-2024-37561

CVE-2024-37561 is a Stored XSS in WordPress Plugin Notes Plus (Jamie Bergen). Affected: Plugin Notes Plus from n/a through 1.2.6. Root cause: Improper Neutralization of Input During Web Page Generation. CVSS 3.1 metrics: AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L with base score 5.9. Public references p...

WordPress Plugin Notes Plus Plugin <= 1.2.6 is vulnerable to Cross Site Scripting (XSS)

Software Plugin Notes Plus Type Plugin Vulnerable versions = 1.2.6 Fixed in 1.2.7 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-37561 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 1f66e01a6482 Credits justakazh Required privilege...