Vulnerabilities (CVE)

Filtered by vendor Aluka Subscribe
Filtered by product Ba Plus
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-22286 1 Aluka 1 Ba Plus 2024-11-21 N/A 7.1 HIGH
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Aluka BA Plus – Before & After Image Slider FREE allows Reflected XSS.This issue affects BA Plus – Before & After Image Slider FREE: from n/a through 1.0.3.