Api.Msrc.Microsoft Multiple CVEs Identified for XSS Vulnerabilities in Jinja and Express
Article Content
Browse articles 
CVE-2024-22195 was published on January 11, 2024, detailing a Cross-Site Scripting (XSS) vulnerability in Jinja. Additionally, CVE-2024-43796, published on September 10, 2024, describes an XSS vulnerability in Express via the response.redirect() method. Both vulnerabilities could potentially affect applications utilizing these frameworks.
Ask AI about this cluster
Answers cite the sources they use
Updated 213d ago How this analysis works
Timeline
2024-01-11
CVE-2024-22195 published
2024-09-10
CVE-2024-43796 published
2026-02-18
Articles published detailing both vulnerabilities
More articles in this cluster (2)
Following this threat?
Track CVE-2024-22195 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
,p_Ii9kYXRhYmFzZS93b3JkcHJlc3MvcGx1Z2luL3NpdGVza2l0ZS92dWxuZXJhYmlsaXR5L3dvcmRwcmVzcy1zaXRlc2tpdGUtcGx1Z2luLTItMS04LXJlbW90ZS1jb2RlLWV4ZWN1dGlvbi1yY2UtdnVsbmVyYWJpbGl0eSI,s__DbMe5dVBwz8g5hf.png)
Multiple WordPress Plugins Face Vulnerabilities Requiring Immediate Updates Three WordPress plugins have been reported with vulnerabilities: the GiveWP plugin (version 4.16.9) has a Cross Site Scripting (XSS) vulnerability, while both the Siteskite (version 2.1.8) and Cartflows (version 3.2.0) plugins have Remote Code Execution (RCE) vulnerabilities. The XSS vulnerability allows attackers to…