Security Advisory

CVE-2024-35651

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-06-04 14:15:52
Last updated 2026-04-28 16:09:52
Assigner Patchstack
State PUBLISHED

Description

Improper Neutralization of Input During Web Page Generation (XSS or Cross-site Scripting) vulnerability in Spiffy Plugins WP Flow Plus allows Stored XSS.This issue affects WP Flow Plus: from n/a through 5.2.2.