Reflected XSS Vulnerability in WP Directory Kit

CVE-2024-29774

Summary

A reflected Cross-site Scripting (XSS) vulnerability has been identified in the WP Directory Kit developed by WpDirectoryKit. This flaw arises from improper neutralization of input during web page generation, allowing attackers to execute malicious scripts in the context of an affected user's browser. The vulnerability impacts all versions from n/a up to 1.2.9 of the WP Directory Kit. Users are strongly advised to implement security best practices to mitigate the risks associated with this vulnerability, especially those utilizing vulnerable versions of the product.

References