CVE-2024-29138: WordPress Restrict User Access plugin <= 2.5 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Joachim Jensen Restrict User Access – Membership Plugin with Force restrict-user-access.This issue affects Restrict User Access – Membership Plugin with Force: from n/a through <= 2.5.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-29138?
CVE-2024-29138 is classified as a high-severity vulnerability due to its potential for reflected cross-site scripting (XSS).
How do I fix CVE-2024-29138?
To fix CVE-2024-29138, update the Restrict User Access – Membership Plugin with Force to the latest version beyond 2.5, if available.
Who is affected by CVE-2024-29138?
CVE-2024-29138 affects users of the Restrict User Access – Membership Plugin with Force version 2.5 and earlier.
What type of vulnerability is CVE-2024-29138?
CVE-2024-29138 is an Improper Neutralization of Input During Web Page Generation vulnerability, specifically a reflected cross-site scripting (XSS) flaw.
Can CVE-2024-29138 compromise user data?
Yes, CVE-2024-29138 can allow attackers to execute malicious scripts in the context of the affected site, potentially compromising user data.