Skip to content
Sign in
6.5 Medium

CVE-2024-23502 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in InfornWeb Posts…

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in InfornWeb Posts List Designer by Category – List Category Posts Or Recent Posts allows Stored XSS.This issue affects Posts List Designer by Category – List Category Posts Or Recent Posts: from n/a through 3.3.2.

Affected products and versions

Product Affected versions Fixed in
Posts List Designer by Category – List Category Posts Or Recent Posts 3.3 earliest → 3.3.2 No fix stated

Other CVEs of Posts List Designer by Category – List Category Posts Or Recent Posts

The 2 CVEs of Posts List Designer by Category – List Category Posts Or Recent Posts →
CVE-2022-4974 The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request… 6.3 Medium
Track this CVE