CVE-2024-43991

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in webdzier Hotel Galaxy allows Stored XSS.This issue affects Hotel Galaxy: from n/a through 4.4.24...

CVE-2024-43991

CVE-2024-43991 affects WordPress theme Hotel Galaxy (versions n/a–4.4.24). The vulnerability is a Stored XSS caused by improper input neutralization during web page generation. Consequences are described as cross-site scripting with low confidentiality/integrity impact and no availability impact,...

WordPress Hotel Galaxy Theme <= 4.4.24 is vulnerable to Cross Site Scripting (XSS)

Software Hotel Galaxy Type Theme Vulnerable versions = 4.4.24 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-43991 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID f1a41da70162 Credits stealthcopter Required privilege Contributo...