CVE-2019-15082

Affected product: WordPress plugin 360-product-rotation (versions before 1.4.8).Vulnerability: Reflected XSS in the plugin which could be triggered by crafted input via user-visible fields; CVE-2019-15082.Impact: Medium severity per CVSS v3.0 (6.1) with network attack vector, low attack complexit...

CVE-2024-13823

The 360 Product Rotation WordPress plugin (versions ≤ 1.5.8) is affected by a Reflected XSS vulnerability caused by failure to sanitize/escape a parameter before output back to the page. This can be triggered against unauthenticated users. A fix is to upgrade to a version that properly sanitizes/...