Skip to content
OpenAdvisories
Medium · 6.5 CVE-2024-43934 EUVD-2024-40583GHSA-62gg-j5pm-8r49

WordPress Collapsing Archives plugin <= 3.0.5 - Cross Site Scripting (XSS) vulnerability

Published Aug 29, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Robert Felty Collapsing Archives allows Stored XSS.This issue affects Collapsing Archives: from n/a through 3.0.5.

Affected products

VendorProductAffectedFixed
Robert Felty Collapsing Archives ≤ 3.0.5 —

References