Skip to content
OpenAdvisories
High · 7.1 CVE-2024-51781 EUVD-2024-45540GHSA-57x4-j2r2-q373

WordPress Firework Shoppable Live Video plugin <= 6.3 - Reflected Cross Site Scripting (XSS) vulnerability

Published Nov 9, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Stefan Backor Firework Shoppable Live Video firework-videos allows Reflected XSS.This issue affects Firework Shoppable Live Video: from n/a through <= 6.3.

Affected products

VendorProductAffectedFixed
Stefan Backor Firework Shoppable Live Video ≤ 6.3 —

References