CVE-2024-29931: WordPress WP Go Maps plugin <= 9.0.29 - Reflected Cross Site Scripting (XSS) vulnerability
Published Mar 27, 2024
·Updated
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPGMaps WP Go Maps wp-google-maps.This issue affects WP Go Maps: from n/a through <= 9.0.29.
Affected Software
3 affected components
Codecabin Wp Go Maps Wordpress<9.0.30
Codecabin Wp Go Maps Wordpress<9.0.30
WP Go Maps WP Google Maps<=9.0.29
Remediation
Information
Update to 9.0.30 or a higher version.
Event History
Mar 27, 2024
CVE Published
via MITRE·10:10 AM
Data Sourced
via MITRE·10:10 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·10:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-29931?
CVE-2024-29931 has a medium severity level due to its potential for reflected cross-site scripting attacks.
2
How do I fix CVE-2024-29931?
To fix CVE-2024-29931, update the WP Go Maps plugin to version 9.0.30 or later.
3
Which versions of WP Go Maps are affected by CVE-2024-29931?
CVE-2024-29931 affects WP Go Maps versions up to and including 9.0.29.
4
What type of vulnerability is CVE-2024-29931?
CVE-2024-29931 is classified as a reflected cross-site scripting (XSS) vulnerability.
5
What is the impact of CVE-2024-29931?
The impact of CVE-2024-29931 includes potential unauthorized access to user data via XSS exploits.