CVE-2024-27997: WordPress Visual Composer plugin <= 45.6.0 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Visual Composer Visual Composer Website Builder visualcomposer.This issue affects Visual Composer Website Builder: from n/a through <= 45.6.0.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-27997?
The severity of CVE-2024-27997 is categorized as a critical vulnerability due to its potential for Stored XSS attacks.
How do I fix CVE-2024-27997?
To fix CVE-2024-27997, update Visual Composer Website Builder to version 45.6.1 or higher as soon as possible.
What type of vulnerability is CVE-2024-27997?
CVE-2024-27997 is classified as a Cross-site Scripting (XSS) vulnerability, specifically a Stored XSS issue.
Which versions are affected by CVE-2024-27997?
CVE-2024-27997 affects Visual Composer Website Builder versions up to 45.6.0 inclusive.
Can CVE-2024-27997 affect WordPress sites?
Yes, CVE-2024-27997 can affect WordPress sites utilizing the Visual Composer plugin versions up to 45.6.0.