TI-2024-25058 CVE-2024-37558 · GHSA-j72h-wx6p-w8j8WordPress WPFavicon plugin <= 2.1.1 - Cross-Site Scripting (XSS) vulnerabilityPriority LOW 26Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Nazmul Hossain Nihal WPFavicon allows Stored XSS.This issue affects WPFavicon: from n/a through 2.1.1.CVSS 3.1MEDIUM 5.9· Network · High privileges · User interaction · EPSS 0.00276 · Published 2024-07-21 · No fix listed CWE-79