CVE-2024-51681

CVE-2024-51681 – WP Pocket URLs (CodeRevolution) Vulnerability: Stored XSS due to Improper Neutralization of Input During Web Page Generation in WP Pocket URLs plugin (≤ 1.0.3). Affected software: WordPress WP Pocket URLs plugin versions up to 1.0.3. Root cause: Cross-site scripting caused by ins...

WordPress WP Pocket URLs Plugin <= 1.0.3 is vulnerable to Cross Site Scripting (XSS)

Software WP Pocket URLs Type Plugin Vulnerable versions = 1.0.3 Fixed in 1.0.4 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51681 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 80e05c72df93 Credits SOPROBRO Required privilege Contributor...