NextMove Lite
XLPlugins
Developer
2.23.0
Latest version
10,000
Installations
No date
Last updated
Vulnerability history
2 present
4 fixed
3 Mitigation rules
- Cross Site Scripting (XSS) vulnerability<= 2.23.0Oct 18, 2025
- Cross Site Scripting (XSS) vulnerability<= 2.23.0Jul 28, 2025
- Missing Authorization to Authenticated (Subscriber+) Deactivation Reason Submission vulnerability<= 2.19.0Feb 28, 2025
- Cross Site Request Forgery (CSRF) vulnerability<= 2.18.1Apr 11, 2024
- Missing Authorization to Unauthenticated System Information Disclosure vulnerability<= 2.18.0Mar 1, 2024
- Subscriber+ Arbitrary Plugin Installation/Activation vulnerability<= 2.17.0Feb 9, 2024