CVE-2024-24838: WordPress Five Star Restaurant Reviews Plugin <= 2.3.5 is vulnerable to Cross Site Scripting (XSS)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Five Star Plugins Five Star Restaurant Reviews allows Stored XSS.This issue affects Five Star Restaurant Reviews: from n/a through 2.3.5.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress Five Star Restaurant Reviews Pluginto a version that resolves this vulnerability.Fixed in 2.3.6
Event History
Frequently Asked Questions
What is the severity of CVE-2024-24838?
CVE-2024-24838 has a medium severity rating due to its potential to allow stored cross-site scripting attacks.
How do I fix CVE-2024-24838?
To fix CVE-2024-24838, update the Five Star Restaurant Reviews plugin to version 2.3.6 or later.
What is the impact of CVE-2024-24838?
CVE-2024-24838 allows attackers to execute arbitrary JavaScript code in the context of users' browsers, posing security risks.
Which versions of the Five Star Restaurant Reviews plugin are affected by CVE-2024-24838?
CVE-2024-24838 affects the Five Star Restaurant Reviews plugin versions from n/a through 2.3.5.
Is CVE-2024-24838 related to Cross-site Scripting (XSS)?
Yes, CVE-2024-24838 is a Stored XSS vulnerability that arises from improper input neutralization during web page generation.