CVE-2024-49289 — WordPress Cooked Pro plugin < 1.8.0 - Cross Site Scripting (XSS) vulnerability

CVE-2024-49289

WordPress Cooked Pro plugin < 1.8.0 - Cross Site Scripting (XSS) vulnerability PUBLISHED

Description (CNA)

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Gora Tech LLC Cooked Pro allows Stored XSS.This issue affects Cooked Pro: from n/a before 1.8.0.

Affected (CNA)

Vendor / product	Versions
Gora Tech LLC / Cooked Pro	affected n/a before 1.8.0

CWE

CWE-79

References

https://patchstack.com/database/vulnerability/cooked-pro/wordpress-cooked-pro-plugin-1-8-0-cross-site-scripting-xss-vulnerability?_s_id=cve

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.