CVE-2024-10815
09.01.2025, 06:15
The PostLists WordPress plugin through 2.0.2 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers
| Vendor | Product | Version |
|---|---|---|
| reneade | postlists | 𝑥 ≤ 2.0.2 |
𝑥
= Vulnerable software versions