CVE-2024-13362 - Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter
CVE ID :CVE-2024-13362 Published : May 1, 2026, 5:29 a.m. | 33 minutes ago Description :Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in various versions due to insufficient input sanitization and output escaping. This makes
ORIGINAL SOURCE →via CVE Feed Latest
ADVERTISEMENT
⚡ STAY AHEAD
Events like this, convergence-verified across 689 sources, land in your inbox every Sunday. Free.
GET THE SUNDAY BRIEFING →RELATED · cyber
- [CYBER] Lee commends law enforcement for almost halving voice phishing damage
- [CYBER] Cyber-Fraud Fusion: Insights from the WTF Summit Panel
- [CYBER] Just started a full Ethical Hacking course on YouTube… here’s my honest experience so far
- [CYBER] No AI Model Can Carry a Creative Project End to End. The HCB Just Proved It.
- [CYBER] DeFi protocol Carrot becomes first casualty of $285M Drift exploit
- [CYBER] Advice from graduates or industry experts