CVE-2024-6665

The KBucket: Your Curated Content WordPress plugin in versions prior to 4.1.6 is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the lack of sanitization and escaping of certain settings, which allows high-privilege users, such as administrators, to execute malicious scripts. ...

CVE-2024-6667

The KBucket: Your Curated Content WordPress plugin, in versions prior to 4.1.5 , is vulnerable to Reflected Cross-Site Scripting (XSS) . The root cause is the failure to properly sanitise and escape a parameter before it is output back onto the page. This flaw could be exploited to target admin u...