6.5
Medium
CVE-2024-43149 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in…
Description
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CreativeMindsSolutions CM Tooltip Glossary allows Stored XSS.This issue affects CM Tooltip Glossary: from n/a through 4.3.7.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| CM Tooltip Glossary 4.3 | earliest → 4.3.7 | No fix stated |
Other CVEs of CM Tooltip Glossary
The 4 CVEs of CM Tooltip Glossary →
CVE-2024-11202
Multiple plugins for WordPress are vulnerable to Reflected Cross-Site Scripting via the cminds_free_guide shortcode in…
6.1
Medium
CVE-2024-48041
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in…
6.5
Medium
CVE-2024-4086
The CM Tooltip Glossary – Powerful Glossary Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in…
4.3
Medium