← Back

Fudugo

fudugo

2 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Fs Product Inquiry
fs_product_inquiry
2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2024-4857
1Fudugo
1Fs Product Inquiry
Jun 17, 2026
Jun 4, 2024
N/A· v4
6.1 MEDIUM· v3
N/A· v2
The FS Product Inquiry WordPress plugin through 1.1.1 does not sanitise and escape some form submissions, which could allow unauthenticated users to perform Stored Cross-Site Scripting attacks
CVE-2024-4856
1Fudugo
1Fs Product Inquiry
Jun 17, 2026
Jun 4, 2024
N/A· v4
8.2 HIGH· v3
N/A· v2
The FS Product Inquiry WordPress plugin through 1.1.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege...Show more
The FS Product Inquiry WordPress plugin through 1.1.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin or unauthenticated usersShow less