CVE-2024-22158: WordPress PeepSo Core: Photos Plugin < 6.3.1.0 is vulnerable to Cross Site Scripting (XSS)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PeepSo Community by PeepSo – Social Network, Membership, Registration, User Profiles allows Stored XSS.This issue affects Community by PeepSo – Social Network, Membership, Registration, User Profiles: from n/a before 6.3.1.0.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
PeepSo Community by PeepSo – Social Network, Membership, Registration, User Profilesto a version that resolves this vulnerability.Fixed in 6.3.1.0 - Upgrade
Upgrade
WordPress PeepSo Core: Photos Pluginto a version that resolves this vulnerability.Fixed in 6.3.1.0
Event History
Frequently Asked Questions
What is the severity of CVE-2024-22158?
CVE-2024-22158 is classified as a high-severity vulnerability due to its potential for stored cross-site scripting attacks.
How do I fix CVE-2024-22158?
To fix CVE-2024-22158, update the PeepSo Community plugin to version 6.3.1.0 or later.
Which versions are affected by CVE-2024-22158?
CVE-2024-22158 affects all versions of PeepSo Community prior to 6.3.1.0.
What types of attacks can CVE-2024-22158 facilitate?
CVE-2024-22158 can facilitate stored cross-site scripting (XSS) attacks, allowing an attacker to inject malicious scripts.
Who is impacted by CVE-2024-22158?
Users of the PeepSo Community plugin on WordPress installations below version 6.3.1.0 are impacted by CVE-2024-22158.