High · 7.1 CVE-2024-30199 EUVD-2024-28131GHSA-972c-hvjh-fh38

WordPress WP-Lister Lite for Amazon plugin <= 2.6.8 - Reflected Cross Site Scripting (XSS) vulnerability

Published Mar 27, 2024 · Updated May 11, 2026 · Assigned by Patchstack

Vendor: WP Lab Product: WP-Lister Lite for Amazon

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Lab WP-Lister Lite for Amazon wp-lister-for-amazon.This issue affects WP-Lister Lite for Amazon: from n/a through <= 2.6.8.

Affected products

Vendor	Product	Affected	Fixed
WP Lab	WP-Lister Lite for Amazon	≤ 2.6.8	—

References

https://patchstack.com/database/Wordpress/Plugin/wp-lister-for-amazon/vulnerability/wordpress-wp-lister-lite-for-amazon-plugin-2-6-8-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve vdb-entry