{ "id": "CVE-2024-4857", "sourceIdentifier": "contact@wpscan.com", "published": "2024-06-04T06:15:12.127", "lastModified": "2024-06-04T06:15:12.127", "vulnStatus": "Received", "descriptions": [ { "lang": "en", "value": "The FS Product Inquiry WordPress plugin through 1.1.1 does not sanitise and escape some form submissions, which could allow unauthenticated users to perform Stored Cross-Site Scripting attacks" } ], "metrics": {}, "references": [ { "url": "https://wpscan.com/vulnerability/bf1b8434-b361-4666-9058-d9f08c09d083/", "source": "contact@wpscan.com" } ] }