synced 2 MIN AGO
01 Record

CVE-2024-13362

Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter

MediumPUBLISHEDCNA: Wordfence
CNA base score6.1 CVSS v3.xCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
View raw JSON

02 Description

Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter

03 Exploitation and scoring

Exploitation
Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.
SSVC decision
  • ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
  • AutomatablenoAt least one step from reconnaissance to exploitation cannot be reliably automated.
  • Technical ImpactpartialSuccessful exploitation gives limited control of the vulnerable component.
CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.
EPSS probability
0.27% probability of exploitation activity in the next 30 days.
EPSS percentile
Equal to or higher than the score of 19.8% of scored records. A rank, not a probability.
NVD base score
6.1 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
NVD analysis status
Deferred. NVD last modified this record on 2026-10-27.
Red Hat severity
No Red Hat rating. Red Hat rates the CVEs that affect its products.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published
2026-05-01 05:29Z6 MO AGO
Last updated
2026-05-01 13:23Z6 MO AGO
Reserved
2025-01-13
Assigning CNA
Wordfence
Record state
PUBLISHED
Severity
Medium (CVSS 6.1)
CNA CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Weaknesses
  • CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Base
Data version
5.2
Document digest
9fe7c4c8846932dd108ad4983da79ff7a03da0b90079d61189616be2a72cced5

05 Affected products

VendorProductVersionsPlatforms
sebetGo Fetch Jobs (for WP Job Manager)0 to 1.8.4.8.1—
5starpluginsDynamic Copyright Year0 to 1.0.4—
peterschulznlCode Manager0 to 1.0.40—
bpluginsAdvanced Scrollbar – Custom Scrollbar Styling and Behavior0 to 1.1.3—
yuvaloGoal Tracker – Custom Event Tracking for GA40 to 1.1.5—
essekiaTablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent0 to 1.1.13—
josevegaWP Page Templates0 to 1.1.16—
hkdigitalagencyPayment Gateway for ACBA BANK0 to 1.2.6—
princeahmedDracula Dark Mode – Accessibility, Reading Mode & Dark Mode for WordPress0 to 1.2.7—
spiderdevsForumax – AI Powered Advanced Community Forum Plugin0 to 1.2.7—
seezeeFive-Star Ratings Shortcode0 to 1.2.56—
oxilabProduct Layouts for WooCommerce0 to 1.3.1—
mr2pMeta Field Block – Display custom fields in the Block Editor without coding0 to 1.3.3—
themelocationCustom WooCommerce Checkout Fields Editor0 to 1.3.4—
100pluginsOpen User Map0 to 1.4.0—
wpdeverWP Notification Bell0 to 1.4.2—
themelocationRemove Add to Cart WooCommerce0 to 1.4.7—
princeahmedFile Manager for Google Drive – Integrate Google Drive0 to 1.4.9—
5starpluginsMarijuana Age Verify0 to 1.5.5—
infosatechRevivePress – Keep your Old Content Evergreen0 to 1.5.8—
nicheaddonsRestaurant & Cafe Addon for Elementor0 to 1.5.8—
paretodigitalSend Users Email – Email Subscribers, Email Marketing Newsletter0 to 1.5.10—
unitecmsUnlimited Elements For Elementor0 to 1.5.140—
meowcrewRole Based Pricing for Woo by Meow Crew0 to 1.6.0—
nicheaddonsPrimary Addon for Elementor0 to 1.6.0—
5starpluginsFeatured Images in RSS for Mailchimp & More0 to 1.6.3—
wpsaadImage Alt Text Manager – Bulk & Dynamic Alt Tags For image SEO Optimization + AI0 to 1.6.3—
kofimokomeMessage Filter for Contact Form 70 to 1.6.3.2—
paretodigitalEmbedder for Google Reviews0 to 1.6.6—
interactivegeomapsMapGeo – Interactive Geo Maps0 to 1.6.22—
wpbitsWPBITS Addons For Elementor Page Builder0 to 1.7—
toddhalfpennyWidgets on Pages0 to 1.7—
rebelcodeSpotlight Social Feeds – Block, Shortcode, and Widget0 to 1.7.0—
tobias_conradWOW Styler for CF7 – Visual Styler for Contact Form 7 Forms0 to 1.7.0—
webfactoryAI Bud – AI Content Generator, AI Chatbot, ChatGPT, Gemini, GPT-4o0 to 1.7.2—
hasanazizulText To Speech TTS Accessibility0 to 1.7.34—
5starpluginsEasy Age Verify0 to 1.8.5—
senolsAI Puffer – Chat. Create. Automate. (formerly AI Power)0 to 1.8.99—
damian-goraJustified Gallery0 to 1.9.0—
mapsterMapster WP Maps0 to 1.9.0—
streamweaselsStreamWeasels Twitch Integration0 to 1.9.2—
xplodedthemesXT Variation Swatches for WooCommerce0 to 1.9.4—
bpluginsbBlocks – Essential Gutenberg Blocks & Patterns Collection0 to 1.9.8—
kaizencodersURL Shortify – Simple and Easy URL Shortener0 to 1.10.4—
uriahs-victorKikote – Location Picker at Checkout & Google Address AutoFill Plugin for WooCommerce0 to 1.10.6—
cyberhoboGeo Mashup0 to 1.13.15—
josevegaDisable Payment Methods based on cart conditions for WooCommerce0 to 1.16.3—
pagupAutomatic Internal Links for SEO by Pagup0 to 2.0.0—
enwebyFull Screen Background0 to 2.0.2—
litonice13Master Addons For Elementor – Widgets, Extensions, Theme Builder, Popup Builder & Template Kits0 to 2.0.7.2—
princeahmedRadio Player – Live Shoutcast, Icecast and Any Audio Stream Player0 to 2.0.82—
spicethemesCarousel, Recent Post Slider and Banner Slider0 to 2.1—
pagupBulk Auto Image Alt Text (Alt tag, Alt attribute) optimizer (image SEO)0 to 2.1.0—
xplodedthemesXT Quick View for WooCommerce0 to 2.1.5—
pluginscafeSmart phone field for Gravity Forms0 to 2.1.6—
foopluginsNotification Bar, Announcement and Cookie Notice WordPress Plugin – FooBar0 to 2.1.34—
bpluginsPDF Poster – Display PDF Files with Custom Viewer0 to 2.2.0—
nicheaddonsEvents Addon for Elementor0 to 2.2.2—
bpluginsHTML5 Audio Player – The Ultimate No-Code Podcast, MP3 & Audio Player0 to 2.2.27—
mte90Glossary0 to 2.2.38—

71 further entries not shown. The complete list is in the raw JSON document.

06 References