5.5.5

DATE	CVE	VULNERABILITY TITLE	RISK
2023-12-28	CVE-2023-50874	Cross-site Scripting vulnerability in Connekthq Ajax Load More Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Darren Cooney WordPress Infinite Scroll – Ajax Load More allows Stored XSS.This issue affects WordPress Infinite Scroll – Ajax Load More: from n/a through 6.1.0.1. network low complexity connekthq CWE-79	5.4
2023-03-13	CVE-2022-4466	Unspecified vulnerability in Connekthq Ajax Load More The WordPress Infinite Scroll WordPress plugin before 5.6.0.3 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. network low complexity connekthq	5.4