Skip to content
OpenAdvisories
Medium · 5.9 CVE-2024-47299 EUVD-2024-42335GHSA-pw4m-g482-6hfw

WordPress Website Builder by SeedProd <= 6.17.4 - Cross Site Scripting (XSS) vulnerability

Published Oct 6, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SeedProd Coming Soon Page, Under Construction & Maintenance Mode by SeedProd coming-soon allows Stored XSS.This issue affects Coming Soon Page, Under Construction & Maintenance Mode by SeedProd: from n/a through <= 6.17.4.

Affected products

VendorProductAffectedFixed
SeedProd Coming Soon Page, Under Construction & Maintenance Mode by SeedProd ≤ 6.17.4 —

References