High · 7.1 CVE-2024-32553 EUVD-2024-30355GHSA-7qhc-wh2f-7458

WordPress Superfly Menu plugin <= 5.0.25 - Subscriber+ Site-Wide Stored Cross Site Scripting (XSS) vulnerability

Published Apr 18, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: looks_awesome Product: Superfly Menu

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in looks_awesome Superfly Menu superfly-menu.This issue affects Superfly Menu: from n/a through <= 5.0.25.

Affected products

Vendor	Product	Affected	Fixed
looks_awesome	Superfly Menu	≤ 5.0.25	—

References

https://patchstack.com/database/Wordpress/Plugin/superfly-menu/vulnerability/wordpress-superfly-menu-plugin-5-0-25-subscriber-site-wide-stored-cross-site-scripting-xss-vulnerability?_s_id=cve vdb-entry