2 matches found
CVE-2024-49695
CVE-2024-49695 involves a Stored XSS in WP Flow Plus (WordPress) due to improper input neutralization during web page generation in versions up to 5.2.3. The vulnerability affects WP Flow Plus and can be mitigated by upgrading to version 5.2.4 or later, per Patchstack and related sources. The CVE...
CVE-2024-35651
CVE-2024-35651 concerns the WP Flow Plus WordPress plugin (Spiffy Plugins) withStored Cross-Site Scripting (XSS) vulnerability in versions