CVE-2024-10483 SimplePress Forum < 6.10.11 - Reflected XSS

The Simple:Press Forum WordPress plugin before 6.10.11 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting...

CVE-2024-10483 SimplePress Forum < 6.10.11 - Reflected XSS

The Simple:Press Forum WordPress plugin before 6.10.11 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting...

CVE-2024-10483

The Simple:Press Forum WordPress plugin affects versions prior to 6.10.11 . The vulnerability is caused by the failure to sanitise and escape a parameter before it is output back onto the page, which results in a Reflected Cross-Site Scripting (XSS) vulnerability. This allows malicious scripts to...

PT-2025-1835 · WordPress · Simple:Press Forum

Name of the Vulnerable Software and Affected Versions: Simple:Press Forum plugin for WordPress versions up to, and including, 6.10.11 Description: The issue is related to Reflected Cross-Site Scripting via the s parameter due to insufficient input sanitization and output escaping. This allows...