WP Flow Plus, CVE-2024-35651

CVE, Research URL: CVE-2024-35651
Home page URL: Security reports for WP Flow Plus
Application: WP Flow Plus
Published on: Jun 04, 2024
Research Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Spiffy Plugins WP Flow Plus allows Stored XSS.This issue affects WP Flow Plus: from n/a through 5.2.2.
Affected versions: Min -, max 5.2.3.
Status: vulnerable