TI-2024-36943 CVE-2024-55864 · GHSA-9pqf-c964-4pgp
Cross-site scripting in gqevu6bsiz My WP Customize Admin/Frontend
Priority LOW 22
Cross-site scripting vulnerability exists in My WP Customize Admin/Frontend versions prior to ver 1.24.1.
No gqevu6bsiz vulnerabilities are listed in CISA KEV.
3 records
Cross-site scripting vulnerability exists in My WP Customize Admin/Frontend versions prior to ver 1.24.1.
Cross-site scripting vulnerability exists in WP Admin UI Customize versions prior to ver 1.5.14.
The Announce from the Dashboard plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.5.2 due to insufficient input sanitization and output escaping.