PT-2025-4494 · Unknown · Faktor Vier F4 Post Tree

The vulnerable software is FAKTOR VIER F4 Post Tree, with versions ranging from n/a to 1.1.18. The vulnerability is an Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting' XSS, which allows Reflected XSS. This vulnerability can be exploited by attacker...

CVE-2024-31925

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in FAKTOR VIER F4 Improvements allows Stored XSS.This issue affects F4 Improvements: from n/a through 1.8.0...

CVE-2024-31925

CVE-2024-31925 refers to a Stored XSS in the F4 Improvements WordPress plugin. Affected versions are from n/a through 1.8.0; the issue arises from improper input neutralization during web page generation. It requires authenticated admin privileges and user interaction to exploit (Stored XSS). The...