TI-2024-11511 CVE-2024-12407 · GHSA-4h4f-68fp-73hw
Push Notification for Post and BuddyPress <= 2.07 - Reflected Cross-Site Scripting
Priority LOW 27
The Push Notification for Post and BuddyPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'pushnotificationid' parameter in all versions up to, and including, 2.07 due to insufficient inp…