Vulnerabilities > Delower

DATE CVE VULNERABILITY TITLE RISK
2024-07-06 CVE-2024-37539 Cross-site Scripting vulnerability in Delower WP to DO
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Delower WP To Do allows Stored XSS.This issue affects WP To Do: from n/a through 1.3.0.
network
low complexity
delower CWE-79
5.4
2024-01-31 CVE-2024-22292 Cross-site Scripting vulnerability in Delower WP to DO
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Delower WP To Do allows Stored XSS.This issue affects WP To Do: from n/a through 1.2.8.
network
low complexity
delower CWE-79
5.4