3 matches found
CVE-2024-51897
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Erik Saulnier News Articles news-articles allows Stored XSS.This issue affects News Articles: from n/a through = 1.0.0...
CVE-2024-51897
CVE-2024-51897 refers to an stored XSS in the WordPress plugin “News Articles” by Erik Saulnier. The Initial and connected records show this affects News Articles versions up to 1.0.0 and arise from improper input neutralization during web page generation. The available documents do not specify a...
WordPress News Articles Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)
Software News Articles Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51897 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID b2e622b9d30c Credits SOPROBRO Required privilege Contributor...