6.5
Moyenne
CVE-2024-50461 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper…
Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper EmbedPress embedpress allows Stored XSS.This issue affects EmbedPress: from n/a through <= 4.0.14.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| EmbedPress 4.0 | premières → 4.0.14 | Pas de correctif indiqué |
Autres CVE de EmbedPress
Les 9 CVE de EmbedPress →
CVE-2026-61961
Unauthenticated Cross Site Scripting (XSS) in EmbedPress <= 4.5.6 versions
7.1
Élevée
CVE-2026-48872
Unauthenticated Sensitive Data Exposure in EmbedPress <= 4.5.2 versions
7.5
Élevée
CVE-2024-38707
Missing Authorization vulnerability in WPDeveloper EmbedPress allows Exploiting Incorrectly Configured Access Control…
6.3
Moyenne
CVE-2024-43936
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WPDeveloper…
6.5
Moyenne