CVE-2024-29925: WordPress Post Grid, Slider & Carousel Ultimate plugin <= 1.6.6 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpWax Post Grid, Slider & Carousel Ultimate allows Stored XSS.This issue affects Post Grid, Slider & Carousel Ultimate: from n/a through 1.6.6.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-29925?
CVE-2024-29925 is classified as a high severity vulnerability due to its potential for causing stored cross-site scripting (XSS) attacks.
How do I fix CVE-2024-29925?
To fix CVE-2024-29925, you should update the wpWax Post Grid, Slider & Carousel Ultimate plugin to version 1.6.6 or later.
Who is affected by CVE-2024-29925?
The vulnerability CVE-2024-29925 affects all versions of wpWax Post Grid, Slider & Carousel Ultimate up to and including 1.6.6.
What type of vulnerability is CVE-2024-29925?
CVE-2024-29925 is an improper neutralization of input during web page generation, commonly known as a stored cross-site scripting (XSS) vulnerability.
Can CVE-2024-29925 be exploited remotely?
Yes, CVE-2024-29925 can be exploited remotely, allowing attackers to execute unauthorized scripts in the context of the user’s browser.