CVE-2024-38767

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in BannerSky.Com BSK PDF Manager allows Stored XSS.This issue affects BSK PDF Manager: from n/a through 3.6...

CVE-2024-38767

CVE-2024-38767 concerns the WordPress plugin BSK PDF Manager (versions up to 3.6). The vulnerability is an XSS (Stored) caused by improper neutralization of input during web page generation. Exploitation could permit stored cross-site scripting within the plugin’s output. The issue is publicly re...

WordPress BSK PDF Manager Plugin <= 3.6 is vulnerable to Cross Site Scripting (XSS)

Software BSK PDF Manager Type Plugin Vulnerable versions = 3.6 Fixed in 3.6.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-38767 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 1d2d0e030fa4 Credits LVT-tholv2k Required privilege Contribut...