CVE-2024-38694

CVE-2024-38694 is a Reflected XSS in the Moloni WordPress plugin (affected: up to version 4.7.4). Exploitable via improper input neutralization during web page generation. Remediation: upgrade to a version containing the fix (beyond 4.7.4) per the CVE details.

CVE-2024-38694 WordPress Moloni plugin <= 4.7.4 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Moloni allows Reflected XSS.This issue affects Moloni: from n/a through 4.7.4...

CVE-2024-38694 WordPress Moloni plugin <= 4.7.4 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Moloni allows Reflected XSS.This issue affects Moloni: from n/a through 4.7.4...

WordPress Moloni Plugin <= 4.7.4 is vulnerable to Cross Site Scripting (XSS)

Software Moloni Type Plugin Vulnerable versions = 4.7.4 Fixed in 4.8.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-38694 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID c1c98bacc1ee Credits Yudistira Arya Required privilege...