CVE-2024-29764: WordPress Molongui plugin <= 4.7.7 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Molongui allows Stored XSS.This issue affects Molongui: from n/a through 4.7.7.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
wordpress/molonguito a version that resolves this vulnerability.Fixed in 4.7.8
Event History
Frequently Asked Questions
What is the severity of CVE-2024-29764?
CVE-2024-29764 is classified as a medium severity vulnerability due to its potential for exploitation through stored cross-site scripting (XSS).
How do I fix CVE-2024-29764?
To fix CVE-2024-29764, update the Molongui software or WordPress Molongui plugin to a version above 4.7.7 that includes the necessary security patches.
What systems are affected by CVE-2024-29764?
CVE-2024-29764 affects all versions of Molongui up to and including 4.7.7.
What kind of attacks can CVE-2024-29764 facilitate?
CVE-2024-29764 can facilitate stored cross-site scripting (XSS) attacks, allowing attackers to inject malicious scripts that execute in users' browsers.
Is there a way to assess if my site is vulnerable to CVE-2024-29764?
To assess if your site is vulnerable to CVE-2024-29764, check if it's using the affected versions of Molongui or WordPress Molongui plugin.