TI-2024-19303 CVE-2024-29129 · GHSA-pqww-rcm3-84v3WordPress OxyExtras plugin <= 1.4.3 - Cross Site Scripting (XSS) vulnerabilityPriority LOW 31Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPLIT Pty Ltd OxyExtras allows Reflected XSS.This issue affects OxyExtras: from n/a through 1.4.4.CVSS 3.1HIGH 7.1· Network · No auth · User interaction · EPSS 0.00372 · Published 2024-03-19 · No fix listed CWE-79