4 matches found
CVE-2024-51891
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SalesWizard.pl Official SalesWizard CRM Plugin official-saleswizard-crm allows Stored XSS.This issue affects Official SalesWizard CRM Plugin: from n/a through = 1.0.3...
CVE-2024-51891 WordPress Official SalesWizard CRM Plugin plugin <= 1.0.2 - Stored Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in 4B Systems sp. z o.o Official SalesWizard CRM Plugin allows Stored XSS.This issue affects Official SalesWizard CRM Plugin: from n/a through 1.0.2...
CVE-2024-51891
This CVE-2024-51891 describes a Stored XSS in the WordPress plugin Official SalesWizard CRM (4B Systems sp. z o.o.). Affected versions are Official SalesWizard CRM Plugin up to 1.0.2 (per NVD/Red Hat/other records). Attacker-controlled input is not neutralized during page generation, enabling sto...
WordPress Official SalesWizard CRM Plugin Plugin <= 1.0.2 is vulnerable to Cross Site Scripting (XSS)
Software Official SalesWizard CRM Plugin Type Plugin Vulnerable versions = 1.0.2 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51891 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 137986a64d62 Credits SOPROBRO Required...