CVE-2024-51889

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in GeroNikolov Fancy User List fancy-user-listing allows Stored XSS.This issue affects Fancy User List: from n/a through = 3.1...

CVE-2024-51889

creationtimestamp| type| source ---|---|--- 2024-11-20 01:53:15+00:00| seen| https://infosec.exchange/users/cve/statuses/113512781018734398...

CVE-2024-51889

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in GeroNikolov Fancy User List fancy-user-listing allows Stored XSS.This issue affects Fancy User List: from n/a through = 3.1...

CVE-2024-51889

CVE-2024-51889 is a stored XSS vulnerability in the WordPress plugin Fancy User List (versions up to 3.1). The issue arises from improper neutralization of input during web page generation, enabling stored cross-site scripting when a user with enough privileges accesses affected pages. Publicly d...

WordPress Fancy User List Plugin <= 3.1 is vulnerable to Cross Site Scripting (XSS)

Software Fancy User List Type Plugin Vulnerable versions = 3.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51889 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 31e7eea63edb Credits SOPROBRO Required privilege Contributor...