CVE-2024-27992: WordPress Link Whisper Free plugin <= 0.6.8 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Link Whisper Link Whisper Free allows Reflected XSS.This issue affects Link Whisper Free: from n/a through 0.6.8.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-27992?
CVE-2024-27992 is classified as a medium severity Reflected Cross-site Scripting (XSS) vulnerability.
How do I fix CVE-2024-27992?
To mitigate CVE-2024-27992, upgrade Link Whisper Free to version 0.6.9 or higher.
What versions of Link Whisper Free are affected by CVE-2024-27992?
CVE-2024-27992 affects Link Whisper Free versions up to and including 0.6.8.
What are the potential risks of CVE-2024-27992?
The potential risks of CVE-2024-27992 include unauthorized access to user sessions and data through the exploitation of reflected XSS.
How does CVE-2024-27992 affect WordPress sites?
CVE-2024-27992 poses a risk to WordPress sites using Link Whisper Free by allowing attackers to execute malicious scripts in the user's browser.