Lucene search
+L

4 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 8:24 a.m.9 views

CVE-2024-49298

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Pepro Dev. Group PeproDev Ultimate Invoice pepro-ultimate-invoice allows Stored XSS.This issue affects PeproDev Ultimate Invoice: from n/a through = 2.0.6...

6.5CVSS5.9AI score0.00249EPSS
Exploits0References1
NVD
NVD
added 2024/10/17 7:15 p.m.12 views

CVE-2024-49298

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Pepro Dev. Group PeproDev Ultimate Invoice pepro-ultimate-invoice allows Stored XSS.This issue affects PeproDev Ultimate Invoice: from n/a through = 2.0.6...

6.5CVSS0.00249EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/10/17 7:2 p.m.27 views

CVE-2024-49298 WordPress PeproDev Ultimate Invoice plugin <= 2.0.6 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Pepro Dev. Group PeproDev Ultimate Invoice pepro-ultimate-invoice allows Stored XSS.This issue affects PeproDev Ultimate Invoice: from n/a through = 2.0.6...

6.5CVSS0.00249EPSS
Exploits0References1
Patchstack
Patchstack
added 2024/10/15 12:0 a.m.13 views

WordPress PeproDev Ultimate Invoice Plugin <= 2.0.6 is vulnerable to Cross Site Scripting (XSS)

Software PeproDev Ultimate Invoice Type Plugin Vulnerable versions = 2.0.6 Fixed in 2.0.7 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-49298 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID ec8d635fcc13 Credits LVT-tholv2k Required privile...

6.5CVSS6.9AI score0.00249EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder