Medium · 5.9 CVE-2024-32591 EUVD-2024-30393GHSA-7jmh-7h9v-9x77

WordPress Backend Designer plugin <= 1.3 - Cross Site Scripting (XSS) vulnerability

Published Apr 18, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Daniele De Rosa Product: Backend Designer

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Daniele De Rosa Backend Designer allows Stored XSS.This issue affects Backend Designer: from n/a through 1.3.

Affected products

Vendor	Product	Affected	Fixed
Daniele De Rosa	Backend Designer	≤ 1.3	—

References

https://patchstack.com/database/vulnerability/backend-designer/wordpress-backend-designer-plugin-1-3-cross-site-scripting-xss-vulnerability?_s_id=cve vdb-entry