CVE-2024-29790: WordPress Squirrly SEO plugin <= 12.3.16 - Reflected Cross Site Scripting (XSS) vulnerability

Q: What is the severity of CVE-2024-29790?

CVE-2024-29790 has a high severity due to its ability to allow reflected cross-site scripting attacks.

Q: How do I fix CVE-2024-29790?

To fix CVE-2024-29790, update the Squirrly SEO Plugin to version 12.3.17 or later.

Q: Which versions are affected by CVE-2024-29790?

CVE-2024-29790 affects the Squirrly SEO Plugin versions from n/a through 12.3.16.

Q: What type of vulnerability is CVE-2024-29790?

CVE-2024-29790 is categorized as a reflected cross-site scripting (XSS) vulnerability.

Q: Who is impacted by CVE-2024-29790?

Users of the Squirrly SEO Plugin version 12.3.16 or earlier are impacted by CVE-2024-29790.

Published Mar 27, 2024

Updated

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Squirrly SEO Plugin by Squirrly SEO allows Reflected XSS.This issue affects SEO Plugin by Squirrly SEO: from n/a through 12.3.16.

Affected Software

2 affected components

Squirrly SEO SEO Plugin<=12.3.16

Squirrly SEO Plugin by Squirrly SEO WordPress<12.3.17

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade WordPress Squirrly SEO plugin to a version that resolves this vulnerability.
Fixed in 12.3.17

Event History

Mar 27, 2024

CVE Published

via MITRE·12:49 PM

Data Sourced

via MITRE·12:49 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·01:15 PM

DescriptionSeverityWeaknessAffected Software

Apr 4, 58713

Event

via FIRST·05:54 AM

Frequently Asked Questions

What is the severity of CVE-2024-29790?

CVE-2024-29790 has a high severity due to its ability to allow reflected cross-site scripting attacks.

How do I fix CVE-2024-29790?