TI-2024-24642 CVE-2024-37114 · GHSA-cmcf-8m42-xc3hWordPress My Favorites plugin <= 1.4.3 - Cross Site Scripting (XSS) vulnerabilityPriority LOW 29Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Takashi Matsuyama My Favorites my-favorites allows DOM-Based XSS.This issue affects My Favorites: from n/a through <=…CVSS 3.1MEDIUM 6.5· Network · Low privileges · User interaction · EPSS 0.00298 · Published 2024-07-22 · No fix listed CWE-79