Skip to content
Sign in
6.1 Medium

CVE-2024-4857 The FS Product Inquiry WordPress plugin through 1.1.1 does not sanitise and escape some form submissions, which could…

Description

The FS Product Inquiry WordPress plugin through 1.1.1 does not sanitise and escape some form submissions, which could allow unauthenticated users to perform Stored Cross-Site Scripting attacks

Affected products and versions

Product Affected versions Fixed in
FS Product Inquiry 1.1 earliest → 1.1.1 No fix stated

Other CVEs of FS Product Inquiry

The 2 CVEs of FS Product Inquiry →
CVE-2024-4856 The FS Product Inquiry WordPress plugin through 1.1.1 does not sanitise and escape a parameter before outputting it back… 8.2 High
Track this CVE