CVE-2024-4616
EUVD-2024-4422421.06.2024, 06:15
The Widget Bundle WordPress plugin through 2.0.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against only unauthenticated users
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| devnath_verma | widget_bundle | 𝑥 ≤ 2.0.0 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| devnath_verma | widget_bundle | 𝑥 ≤ 2.0.0 | ADP |