CVE-2024-30192: WordPress Pinterest Plugin <= 1.8.2 - Cross Site Scripting (XSS)
Published Mar 27, 2024
·Updated
A vulnerability in GS Plugins GS Pins for Pinterest gs-pinterest-portfolio.This issue affects GS Pins for Pinterest: from n/a through <= 1.8.2.
Affected Software
3 affected components
GS Plugins GS Pins for Pinterest<=1.8.2
WordPress Pinterest Plugin<=1.8.2
Gsplugins Gs Pinterest Portfolio Wordpress<1.8.3
Remediation
Information
Update to 1.8.3 or a higher version.
Event History
Mar 27, 2024
CVE Published
via MITRE·06:43 AM
Data Sourced
via MITRE·06:43 AM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·07:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-30192?
CVE-2024-30192 is classified as a high severity vulnerability due to its potential for stored cross-site scripting attacks.
2
How do I fix CVE-2024-30192?
To fix CVE-2024-30192, update the GS Pins for Pinterest plugin to version 1.8.3 or later immediately.
3
What products are affected by CVE-2024-30192?
CVE-2024-30192 affects GS Pins for Pinterest versions up to and including 1.8.2.
4
What type of vulnerability is CVE-2024-30192?
CVE-2024-30192 is an improper neutralization of input during web page generation vulnerability, leading to stored cross-site scripting (XSS).
5
Who is impacted by CVE-2024-30192?
Users of the GS Pins for Pinterest plugin in WordPress who have not updated beyond version 1.8.2 are at risk due to CVE-2024-30192.