Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2024-49695

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Spiffy Plugins WP Flow Plus wp-imageflow2 allows Stored XSS.This issue affects WP Flow Plus: from n/a through <= 5.2.3.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 55.6%
CVSS Severity
CVSS v3 Score 5.4
Products affected by CVE-2024-49695


Contact Us

Shodan ® - All rights reserved