Skip to content
Sign in
5.9 Medium

CVE-2024-34568 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeqx…

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeqx LetterPress allows Stored XSS.This issue affects LetterPress: from n/a through 1.2.1.

Affected products and versions

Product Affected versions Fixed in
LetterPress 1.2 earliest → 1.2.1 No fix stated

Other CVEs of LetterPress

The 3 CVEs of LetterPress →
CVE-2024-3590 The LetterPress WordPress plugin through 1.2.2 does not have CSRF checks in some places, which could allow attackers to… 6.1 Medium CVE-2023-27415 Auth 5.9 Medium
Track this CVE