Skip to content
OpenAdvisories
Medium · 5.5 CVE-2024-43915 EUVD-2024-40565GHSA-87jf-8g46-rh2g

WordPress Zephyr Project Manager plugin <=3.3.102 - Cross Site Scripting (XSS) vulnerability

Published Aug 26, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Dylan James Zephyr Project Manager allows Reflected XSS.This issue affects Zephyr Project Manager: from n/a through .3.102.

Affected products

VendorProductAffectedFixed
Dylan James Zephyr Project Manager ≤ .3.102 —

References