CVE-2024-11758

The WP SPID Italia plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode in all versions up to, and including, 2.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, wit...

WordPress WP SPID Italia Plugin <= 2.4.3 is vulnerable to Cross Site Scripting (XSS)

Software WP SPID Italia Type Plugin Vulnerable versions = 2.4.3 Fixed in 2.5 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID d8c2a46f0b6d Credits Rafie Muhammad Patchstack Required...