CVE-2024-35694

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Amauri WPMobile.App wpappninja.This issue affects WPMobile.App: from n/a through <= 11.41.

View graph Watch Export

CVSS v3.1

7.1 HIGH

EPSS

0.66%

probability of exploitation in 30 days

CISA KEV

Not listed

no confirmed exploitation reported

News coverage

sources referencing this CVE

EPSS Trend

Aug 16, 2026 → Sep 4, 2026

● 0.01pp

0.67% → 0.66% over 2 tracked changes

CVSS v3.1 Detail

Attack VectorNETWORK

Attack ComplexityLOW

Privileges RequiredNONE

User InteractionREQUIRED

ScopeCHANGED

ConfidentialityLOW

IntegrityLOW

AvailabilityLOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Connections

2 relationships

CWE-79

source

Timeline

disclosure → media coverage

Jun 8, 2024

Disclosure — published as a CVE record. · last revised by NVD Apr 23, 2026