3 matches found
CVE-2024-4857 FS Product Inquiry <= 1.1.1 - Unauthenticated Stored XSS
The FS Product Inquiry WordPress plugin through 1.1.1 does not sanitise and escape some form submissions, which could allow unauthenticated users to perform Stored Cross-Site Scripting attacks...
CVE-2024-4857
The FS Product Inquiry WordPress plugin (versions 1.1.1 and earlier ) is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the failure to properly sanitize and escape certain form submissions, which allows unauthenticated users to inject malicious scripts. This vulnerability can...
CVE-2024-4857 FS Product Inquiry <= 1.1.1 - Unauthenticated Stored XSS
The FS Product Inquiry WordPress plugin through 1.1.1 does not sanitise and escape some form submissions, which could allow unauthenticated users to perform Stored Cross-Site Scripting attacks...