CVE-2024-29790: WordPress Squirrly SEO plugin <= 12.3.16 - Reflected Cross Site Scripting (XSS) vulnerability
Published Mar 27, 2024
·Updated
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Squirrly SEO Plugin by Squirrly SEO allows Reflected XSS.This issue affects SEO Plugin by Squirrly SEO: from n/a through 12.3.16.
Affected Software
2 affected components
Squirrly SEO SEO Plugin<=12.3.16
Squirrly SEO Plugin by Squirrly SEO WordPress<12.3.17
Remediation
Information
Update to 12.3.17 or a higher version.
Event History
Mar 27, 2024
CVE Published
via MITRE·12:49 PM
Data Sourced
via MITRE·12:49 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·01:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-29790?
CVE-2024-29790 has a high severity due to its ability to allow reflected cross-site scripting attacks.
2
How do I fix CVE-2024-29790?
To fix CVE-2024-29790, update the Squirrly SEO Plugin to version 12.3.17 or later.
3
Which versions are affected by CVE-2024-29790?
CVE-2024-29790 affects the Squirrly SEO Plugin versions from n/a through 12.3.16.
4
What type of vulnerability is CVE-2024-29790?
CVE-2024-29790 is categorized as a reflected cross-site scripting (XSS) vulnerability.
5
Who is impacted by CVE-2024-29790?
Users of the Squirrly SEO Plugin version 12.3.16 or earlier are impacted by CVE-2024-29790.