CVE-2024-29125: WordPress Coupon Affiliates plugin <= 5.12.7 - Reflected Cross Site Scripting (XSS) vulnerability
Published Mar 19, 2024
·Updated
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Elliot Sowersby / RelyWP Coupon Affiliates woo-coupon-usage.This issue affects Coupon Affiliates: from n/a through <= 5.12.7.
Affected Software
1 affected component
RelyWP Coupon Affiliates<=5.12.7
Remediation
Information
Update to 5.12.8 or a higher version.
Event History
Mar 19, 2024
CVE Published
via MITRE·02:25 PM
Data Sourced
via MITRE·02:25 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·03:15 PM
DescriptionSeverityWeakness
Mar 30, 58713
Event
via FIRST·12:21 PM
Frequently Asked Questions
1
What is the severity of CVE-2024-29125?
CVE-2024-29125 is classified as a reflected Cross-site Scripting (XSS) vulnerability.
2
How do I fix CVE-2024-29125?
To fix CVE-2024-29125, update RelyWP Coupon Affiliates to a version later than 5.12.7.
3
What versions are affected by CVE-2024-29125?
CVE-2024-29125 affects RelyWP Coupon Affiliates versions up to and including 5.12.7.
4
What type of attack can be executed through CVE-2024-29125?
CVE-2024-29125 allows attackers to execute reflected Cross-site Scripting (XSS) attacks.
5
Who is impacted by CVE-2024-29125?
Any user of RelyWP Coupon Affiliates versions up to 5.12.7 is potentially impacted by CVE-2024-29125.