CVE-2024-22292

Description

References

• patchstack.com/database/vulnerability/wp-todo/wordpress-wp-to-do-plugin-1-2-8-cross-site-scripting-xss-vulnerability · Third Party Advisory

More vulnerabilities in wp to do

• CVE-2024-3944MEDIUM 4.8The WP To Do plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment in all versions up to, and including, 1.3.0 due t…
• CVE-2024-37539MEDIUM 5.4Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Delower WP To Do allows Stored …
• CVE-2024-3947MEDIUM 4.3The WP To Do plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.0. This is due to mi…
• CVE-2024-3946MEDIUM 4.8The WP To Do plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.3.…
• CVE-2024-3945MEDIUM 4.3The WP To Do plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.0. This is due to mi…