TI-2024-12377 CVE-2024-13334 · GHSA-6rf4-v3p5-cm35Car Demon <= 1.8.1 - Reflected Cross-Site ScriptingPriority LOW 27The Car Demon plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'search_condition' parameter in all versions up to, and including, 1.8.1 due to insufficient input sanitization and output escapi…CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00299 · Published 2025-01-15 · No fix listed CWE-79