CVE-2024-29807

CVE-2024-29807 is a Stored XSS vulnerability in the DearFlip DearFlip WordPress plugin (DearFlip). The issue arises from improper neutralization of input during web page generation, enabling attacker-supplied input to be stored and later executed in the context of the victim’s browser. Affected p...

CVE-2021-24732

The CVE concerns the DearFlip (Dflip Lite) WordPress plugin, prior to version 1.7.10. The vulnerability arises from not escaping the class attribute of the plugin’s shortcode before outputting it in an attribute, enabling Stored Cross-Site Scripting by users with as low as Contributor privileges....