TI-2024-10525 CVE-2024-11360 · GHSA-w6c8-fq5v-p3qwPage Parts <= 1.4.3 - Reflected Cross-Site ScriptingPriority LOW 29The Page Parts plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of remove_query_arg without appropriate escaping on the URL in all versions up to, and including, 1.4.3.CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.008 · Published 2024-11-21 · No fix listed CWE-79