VYPR
← All advisories
Unrated severityNVD Advisory· Published Jul 21, 2024· Updated Apr 28, 2026

WordPress SuperSaaS – online appointment scheduling plugin <= 2.1.9 - Cross Site Scripting (XSS) vulnerability

CVE-2024-37460

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in SuperSaaS SuperSaaS – online appointment scheduling allows Stored XSS.This issue affects SuperSaaS – online appointment scheduling: from n/a through 2.1.9.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • SuperSaaS/SuperSaaSllm-create
    Range: <=2.1.9
  • SuperSaaS/SuperSaaS – online appointment schedulingv5
    Range: n/a

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.