Skip to content
OpenAdvisories
Medium · 6.5 CVE-2024-53771 EUVD-2024-52103GHSA-vj74-c5cx-84rr

WordPress SimpleSchema plugin <= 1.7.6.9 - Cross Site Scripting (XSS) vulnerability

Published Nov 30, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sergiomico SimpleSchema simpleschema-free allows DOM-Based XSS.This issue affects SimpleSchema: from n/a through <= 1.7.6.9.

Affected products

VendorProductAffectedFixed
sergiomico SimpleSchema ≤ 1.7.6.9 —

References