CVE-2024-29096

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Matt Manning MJM Clinic.This issue affects MJM Clinic: from n/a through 1.1.22...

CVE-2024-29096

CVE-2024-29096 is an XSS vulnerability in the MJM Clinic WordPress plugin (MJM Clinic), affecting versions from unspecified up to and including 1.1.22. The root cause is improper neutralization/escaping of user input during web page generation, enabling cross‑site scripting. The Red Hat entry rei...

CVE-2024-29140

CVE-2024-29140 : Stored XSS in the MJM Clinic WordPress plugin (versions up to 1.1.22). Exploitation requires Administrator privileges; input is improperly sanitized in web-page generation, allowing script execution on affected pages. Patch available in 1.1.23, upgrade recommended. Public advisor...