CVE-2024-0187: Community by PeepSo < 6.3.1.2 - Reflected XSS
The Community by PeepSo WordPress plugin before 6.3.1.2 does not sanitise and escape various parameters and generated URLs before outputting them back attributes, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-0187?
CVE-2024-0187 has a high severity rating due to the potential for Reflected Cross-Site Scripting targeting high privilege users.
How do I fix CVE-2024-0187?
To fix CVE-2024-0187, upgrade the Community by PeepSo WordPress plugin to version 6.3.1.2 or later.
Who is affected by CVE-2024-0187?
CVE-2024-0187 affects users of the Community by PeepSo WordPress plugin versions prior to 6.3.1.2.
What type of vulnerability is CVE-2024-0187?
CVE-2024-0187 is classified as a Reflected Cross-Site Scripting vulnerability.
What can attackers do with CVE-2024-0187?
Attackers can exploit CVE-2024-0187 to carry out Reflected Cross-Site Scripting attacks against high privilege users.