Vulnerabilities in mr2p
4 resultsCVE-2024-11098MEDIUMSVG Block <= 1.1.24 - Authenticated (Administrator+) Stored Cross-Site Scripting via SVG File UploadEPSS 0.4%CVE-2024-13362MEDIUMFreemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url ParameterEPSS 0.3%CVE-2026-3173MEDIUMMeta Field Block <= 1.5.1 - Insecure Direct Object Reference to Authenticated (Contributor+) Arbitrary User Meta ExposureEPSS 0.2%CVE-2026-6252MEDIUMMeta Field Block <= 1.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'tagName' Block AttributeEPSS 0.2%