CVE-2024-22162: WordPress WPZOOM Shortcodes plugin <= 1.0.5 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPZOOM WPZOOM Shortcodes wpzoom-shortcodes allows Reflected XSS.This issue affects WPZOOM Shortcodes: from n/a through <= 1.0.5.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-22162?
CVE-2024-22162 is classified as a moderate severity vulnerability due to its potential for reflected cross-site scripting (XSS).
How do I fix CVE-2024-22162?
To fix CVE-2024-22162, update the WPZOOM Shortcodes plugin to version 1.0.3 or later.
What type of vulnerability is CVE-2024-22162?
CVE-2024-22162 is an improper neutralization of input during web page generation, leading to reflected cross-site scripting (XSS).
Which versions of WPZOOM Shortcodes are affected by CVE-2024-22162?
CVE-2024-22162 affects WPZOOM Shortcodes versions prior to 1.0.1.
Can CVE-2024-22162 be exploited remotely?
Yes, CVE-2024-22162 can be exploited remotely by an attacker through a crafted URL targeting the vulnerable WPZOOM Shortcodes.