TI-2024-23643 CVE-2024-35774 · GHSA-r26w-3gqc-4mf5WordPress DImage 360 plugin <= 2.0 - Cross Site Scripting (XSS) vulnerabilityPriority LOW 28Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in D’arteweb DImage 360 allows Stored XSS.This issue affects DImage 360: from n/a through 2.0.CVSS 3.1MEDIUM 6.5· Network · Low privileges · User interaction · EPSS 0.0026 · Published 2024-06-21 · No fix listed CWE-79