WordPress Progress Planner Plugin <= 0.9.2 is vulnerable to Cross Site Scripting (XSS)

Software Progress Planner Type Plugin Vulnerable versions = 0.9.2 Fixed in 0.9.3 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-37422 Patch priority Medium CVSS severity Medium 6.5 Developer Emilia Projects PSID ae1b0a295095 Credits justakazh Required privilege...

WordPress Progress Planner Plugin <= 0.9.1 is vulnerable to Broken Access Control

Software Progress Planner Type Plugin Vulnerable versions = 0.9.1 Fixed in 0.9.2 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-37411 Patch priority Low CVSS severity Low 5.3 Developer Emilia Projects PSID ebabbb98b307 Credits Djennez Required privilege...