CVE-2024-0905 – The Fancy Product Designer WordPress plugin before 6.1.8 does not sanitise and escape a …

Vuln ID: CVE-2024-0905

Published:  2024-04-26  05:15:49.907

Description: The Fancy Product Designer WordPress plugin before 6.1.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against unauthenticated and admin-level users

Base Score: –

Vector:

Source: NVD.NIST.GOV

 

Date:

Categorie(s):

Tag(s):