Skip to content
OpenAdvisories
High · 7.1 CVE-2024-48032 EUVD-2024-42904GHSA-3832-qfwh-78wc

WordPress Featured Posts with Multiple Custom Groups (FPMCG) plugin <= 4.0 - Reflected Cross Site Scripting (XSS) vulnerability

Published Oct 17, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sumitsurai Featured Posts with Multiple Custom Groups (FPMCG) featured-posts-with-multiple-custom-groups-fpmcg allows Reflected XSS.This issue affects Featured Posts with Multiple Custom Groups (FPMCG): from n/a through <= 4.0.

Affected products

VendorProductAffectedFixed
sumitsurai Featured Posts with Multiple Custom Groups (FPMCG) ≤ 4.0 —

References