Medium · 6.5 CVE-2024-27990 EUVD-2024-25164GHSA-h53p-rqw3-mjw4

WordPress The Moneytizer plugin <= 9.5.20 - Cross Site Scripting (XSS) vulnerability

Published Mar 21, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: The Moneytizer Product: The Moneytizer

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in The Moneytizer allows Stored XSS.This issue affects The Moneytizer: from n/a through 9.5.20.

Affected products

Vendor	Product	Affected	Fixed
The Moneytizer	The Moneytizer	≤ 9.5.20	—

References

https://patchstack.com/database/vulnerability/the-moneytizer/wordpress-the-moneytizer-plugin-9-5-20-cross-site-scripting-xss-vulnerability?_s_id=cve vdb-entry