Skip to content
OpenAdvisories
High · 7.1 CVE-2024-38696 EUVD-2024-37547GHSA-wp4f-2cvh-fwpc

WordPress Zoho CRM Lead Magnet plugin <= 1.7.8.8 - Cross Site Scripting (XSS) vulnerability

Published Jul 20, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Zoho CRM Zoho CRM Lead Magnet allows Reflected XSS.This issue affects Zoho CRM Lead Magnet: from n/a through 1.7.8.8.

Affected products

VendorProductAffectedFixed
Zoho CRM Zoho CRM Lead Magnet ≤ 1.7.8.8 —

References