Skip to content
Sign in
7.1 High

CVE-2024-49300 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Hero Mega…

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Hero Mega Menu - Responsive WordPress Menu Plugin allows Reflected XSS. This issue affects Hero Mega Menu - Responsive WordPress Menu Plugin: from n/a through 1.16.5.

Affected products and versions

Product Affected versions Fixed in
Hero Mega Menu - Responsive WordPress Menu Plugin 1.16 earliest → 1.16.5 No fix stated

Other CVEs of Hero Mega Menu - Responsive WordPress Menu Plugin

The 3 CVEs of Hero Mega Menu - Responsive WordPress Menu Plugin →
CVE-2024-49303 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NotFound Hero Mega… 8.5 High CVE-2024-49333 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NotFound Hero Mega… 8.5 High
Track this CVE