CVE-2024-2702: WordPress Olive One Click Demo Import plugin <= 1.1.1 - Broken Access Control vulnerability
Published Mar 20, 2024
·Updated
Missing Authorization vulnerability in Olive Themes Olive One Click Demo Import allows importing settings and data, ultimately leading to XSS.This issue affects Olive One Click Demo Import: from n/a through 1.1.1.
Affected Software
3 affected components
Olive Themes Olive One Click Demo Import<=1.1.1
WordPress Olive One Click Demo Import<=1.1.1
olivethemes Olive One Click Demo Import Wordpress<1.1.2
Remediation
Information
Update to 1.1.2 or a higher version.
Event History
Mar 20, 2024
CVE Published
via MITRE·09:36 AM
Data Sourced
via MITRE·09:36 AM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·10:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-2702?
CVE-2024-2702 is classified as a missing authorization vulnerability that can lead to cross-site scripting (XSS).
2
How do I fix CVE-2024-2702?
To fix CVE-2024-2702, update Olive One Click Demo Import to version 1.1.2 or later.
3
What versions of Olive One Click Demo Import are affected by CVE-2024-2702?
CVE-2024-2702 affects Olive One Click Demo Import versions up to and including 1.1.1.
4
Is CVE-2024-2702 related to any specific impact on user data?
Yes, CVE-2024-2702 can potentially lead to unauthorized access and manipulation of user data through XSS.
5
Where can I find more information about CVE-2024-2702?
More information about CVE-2024-2702 can typically be found in security bulletins or vulnerability databases.