Skip to content
OpenAdvisories
Medium · 6.5 CVE-2024-51611 EUVD-2024-45446GHSA-3724-jcfq-mvfc

WordPress WP Feature Box plugin <= 0.1.3 - Stored Cross Site Scripting (XSS) vulnerability

Published Nov 9, 2024 · Updated May 13, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Miguel Peixe WP Feature Box wp-feature-box allows Stored XSS.This issue affects WP Feature Box: from n/a through <= 0.1.3.

Affected products

VendorProductAffectedFixed
Miguel Peixe WP Feature Box ≤ 0.1.3 —

References