6.3
Medium
CVE-2024-0905 The Fancy Product Designer WordPress plugin before 6.1.8 does not sanitise and escape a parameter before outputting it…
Description
The Fancy Product Designer WordPress plugin before 6.1.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against unauthenticated and admin-level users
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Fancy Product Designer 6.1 | earliest → < 6.1.8 | 6.1.8 |
| fancy_product_designer 6.1 | earliest → < 6.1.8 | 6.1.8 |
Other CVEs of Fancy Product Designer
The 7 CVEs of Fancy Product Designer →
CVE-2024-0904
The Fancy Product Designer WordPress plugin before 6.1.81 does not sanitise and escape some of its settings, which could…
5.9
Medium
CVE-2024-0902
The Fancy Product Designer WordPress plugin before 6.1.81 does not sanitise and escape some of its settings, which could…
4.3
Medium
CVE-2024-0365
The Fancy Product Designer WordPress plugin before 6.1.5 does not properly sanitise and escape a parameter before…
6.5
Medium
CVE-2021-4334
The Fancy Product Designer plugin for WordPress is vulnerable to unauthorized modification of site options due to a…
8.8
High