Medium · 6.5 CVE-2024-52422 EUVD-2024-45907GHSA-373m-459c-25jg

WordPress WP Githuber MD plugin <= 1.16.3 - Cross Site Scripting (XSS) vulnerability

Published Nov 18, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Terry L. Product: WP Githuber MD

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Terry L. WP Githuber MD wp-githuber-md allows Stored XSS.This issue affects WP Githuber MD: from n/a through <= 1.16.3.

Affected products

Vendor	Product	Affected	Fixed
Terry L.	WP Githuber MD	≤ 1.16.3	—

References

https://patchstack.com/database/Wordpress/Plugin/wp-githuber-md/vulnerability/wordpress-wp-githuber-md-plugin-1-16-3-cross-site-scripting-xss-vulnerability?_s_id=cve vdb-entry