Reflected XSS Vulnerability in WP-Lister Lite for eBay

CVE-2024-47380

Summary

A reflected Cross-site Scripting (XSS) vulnerability exists in WP Lab's WP-Lister Lite for eBay plugin, affecting versions up to and including 3.6.3. This vulnerability arises from improper neutralization of user input during the generation of web pages, allowing attackers to inject malicious scripts. Successful exploitation can lead to unauthorized access and data manipulation within affected web applications. It is crucial for users of the plugin to apply security patches to mitigate this issue and protect sensitive information.

References