CVE-2024-27965: WordPress WPFunnels plugin <= 3.0.6 - Cross Site Scripting (XSS) vulnerability
Published Mar 21, 2024
·Updated
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPFunnels WPFunnels wpfunnels.This issue affects WPFunnels: from n/a through <= 3.0.6.
Affected Software
3 affected components
Getwpfunnels Wpfunnels Wordpress<3.0.7
WPFunnels Team WPFunnels<=3.0.6
WordPress WPFunnels plugin<=3.0.6
Remediation
Information
Update to 3.0.7 or a higher version.
Event History
Mar 21, 2024
CVE Published
via MITRE·04:38 PM
Data Sourced
via MITRE·04:38 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-27965?
CVE-2024-27965 is classified as a high severity vulnerability due to its potential for Stored Cross-site Scripting (XSS).
2
How do I fix CVE-2024-27965?
To fix CVE-2024-27965, update WPFunnels to version 3.0.7 or higher immediately to eliminate the vulnerability.
3
Which versions of WPFunnels are affected by CVE-2024-27965?
CVE-2024-27965 affects all versions of WPFunnels up to and including version 3.0.6.
4
What type of vulnerability is CVE-2024-27965?
CVE-2024-27965 is a Stored Cross-site Scripting (XSS) vulnerability allowing attackers to inject malicious scripts.
5
Is CVE-2024-27965 a critical vulnerability?
Yes, CVE-2024-27965 is considered critical as it can lead to severe impacts on user data and website integrity.