CVE-2024-4856

CVE-2024-4856 refers to the FS Product Inquiry WordPress plugin (versions ≤ 1.1.1) and describes a reflected XSS flaw. The vulnerability arises from not sanitising/escaping a parameter before echoing it on the page, potentially impacting admins or unauthenticated users. Public sources corroborate...

CVE-2024-4857

CVE-2024-4857 affects the WordPress plugin “FS Product Inquiry” for versions up to 1.1.1, where user input in form submissions is not sanitized/escaped, enabling unauthenticated Stored XSS. Affected product: FS Product Inquiry WordPress plugin