← CVE Intelligence

CVE-2024-37253

WordPress WPDirectoryKit plugin <= 1.3.6 - HTML Injection vulnerability PUBLISHED

Description (CNA)

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in WpDirectoryKit WP Directory Kit allows Code Injection.This issue affects WP Directory Kit: from n/a through 1.3.6.

Affected (CNA)

Vendor / productVersions
WpDirectoryKit / WP Directory Kitaffected n/a through 1.3.6

CWE

CWE-74

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.