Vulnerabilities > Wpdirectorykit > WP Directory KIT > 1.3.3

DATE CVE VULNERABILITY TITLE RISK
2024-07-21 CVE-2024-37487 Cross-site Scripting vulnerability in Wpdirectorykit WP Directory KIT
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in wpdirectorykit.Com WP Directory Kit allows Reflected XSS.This issue affects WP Directory Kit: from n/a through 1.3.5.
network
low complexity
wpdirectorykit CWE-79
6.1
6.1
2024-07-09 CVE-2024-37253 Cross-site Scripting vulnerability in Wpdirectorykit WP Directory KIT
Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in WpDirectoryKit WP Directory Kit allows Code Injection.This issue affects WP Directory Kit: from n/a through 1.3.6.
network
low complexity
wpdirectorykit CWE-79
2.7
2.7