CVE-2024-51708

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Narnoo Narnoo Commerce Manager narnoo-commerce-manager allows Reflected XSS.This issue affects Narnoo Commerce Manager: from n/a through = 1.6.0...

CVE-2024-51708

CVE-2024-51708 is a reflected XSS in Narnoo Commerce Manager (WordPress plugin) affecting versions up to 1.6.0. The issue stems from improper input neutralization during web-page generation, enabling a reflected Cross-Site Scripting payload. The CVE has a CVSS v3.1 base score of 7.1 ( HIGH ), wit...