CVE-2024-24879: WordPress Link Library Plugin <= 7.5.13 is vulnerable to Cross Site Scripting (XSS)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Yannick Lefebvre Link Library allows Reflected XSS.This issue affects Link Library: from n/a through 7.5.13.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Yannick Lefebvre Link Libraryto a version that resolves this vulnerability.Fixed in 7.6
Event History
Frequently Asked Questions
What is the severity of CVE-2024-24879?
CVE-2024-24879 is classified as a moderate severity vulnerability due to its potential for reflected cross-site scripting (XSS) attacks.
How do I fix CVE-2024-24879?
To fix CVE-2024-24879, update the Link Library plugin to version 7.5.14 or higher.
Who is affected by CVE-2024-24879?
CVE-2024-24879 affects all versions of Link Library plugin from its release up to version 7.5.13.
What kind of exploit does CVE-2024-24879 allow?
CVE-2024-24879 allows for reflected XSS attacks, which can enable attackers to execute malicious scripts in the context of the user's browser.
What is Cross-site Scripting related to CVE-2024-24879?
Cross-site Scripting in the context of CVE-2024-24879 refers to the improper neutralization of input during web page generation that could allow an attacker to inject and execute scripts.