Skip to content
OpenAdvisories
High · 7.1 CVE-2024-54299 EUVD-2024-52422GHSA-678p-f9v3-rq46

WordPress Revi.io plugin <= 5.7.3 - Reflected Cross Site Scripting (XSS) vulnerability

Published Dec 13, 2024 · Updated May 11, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in revidev Revi.io revi-io-customer-and-product-reviews allows Reflected XSS.This issue affects Revi.io: from n/a through <= 5.7.3.

Affected products

VendorProductAffectedFixed
revidev Revi.io ≤ 5.7.3 —

References