CVE-2024-56035 WordPress Upload Scanner plugin <= 1.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kurt Payne Upload Scanner allows Reflected XSS.This issue affects Upload Scanner: from n/a through 1.2...

CVE-2024-56035

CVE-2024-56035 — The connected sources indicate an XSS vulnerability in the WordPress plugin Upload Scanner (CVE-2024-56035). The entry describes an improper neutralization of input during web page generation that allows Reflected XSS. Affected software: Upload Scanner, versions up to 1.2 (from n...

Elementor Pro Plugin for WordPress < 2.9.4 Arbitrary File Upload

The WordPress Elementor Pro Plugin installed on the remote host is affected by an authenticated arbitrary file upload vulnerability that could lead to remote code execution. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported versio...