Skip to content
OpenAdvisories
High · 7.1 CVE-2024-31091 EUVD-2024-29002GHSA-8q9w-j9m7-595w

WordPress Custom Field Bulk Editor plugin <= 1.9.1 - Cross Site Scripting vulnerability

Published Mar 31, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SparkWeb Interactive, Inc. Custom Field Bulk Editor allows Reflected XSS.This issue affects Custom Field Bulk Editor: from n/a through 1.9.1.

Affected products

VendorProductAffectedFixed
SparkWeb Interactive Custom Field Bulk Editor ≤ 1.9.1 —

References