CVE-2024-29129 WordPress OxyExtras plugin <= 1.4.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPLIT Pty Ltd OxyExtras allows Reflected XSS.This issue affects OxyExtras: from n/a through 1.4.4...

WordPress OxyExtras Plugin <= 1.4.4 is vulnerable to Cross Site Scripting (XSS)

Software OxyExtras Type Plugin Vulnerable versions = 1.4.4 Fixed in 1.4.5 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-29129 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 221cff762150 Credits luc Required privilege Unauthenticated...