CVE-2024-30198: WordPress Buddyforms plugin <= 2.8.5 - Reflected Cross Site Scripting (XSS) vulnerability

Q: What is the severity of CVE-2024-30198?

CVE-2024-30198 is classified as a high severity vulnerability due to its potential for reflected cross-site scripting.

Q: How do I fix CVE-2024-30198?

To fix CVE-2024-30198, update BuddyForms to the latest version beyond 2.8.5 to ensure proper input handling.

Q: Which software versions are affected by CVE-2024-30198?

CVE-2024-30198 affects BuddyForms versions up to 2.8.5.

Q: What type of vulnerability is CVE-2024-30198?

CVE-2024-30198 is an improper neutralization of input during web page generation, categorized as a Cross-site Scripting (XSS) vulnerability.

Q: Is CVE-2024-30198 a concern for all BuddyForms users?

Yes, all users of BuddyForms version 2.8.5 and below should be concerned about CVE-2024-30198 due to the risk of reflected XSS attacks.

Published Mar 27, 2024

Updated

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeKraft BuddyForms allows Reflected XSS.This issue affects BuddyForms: from n/a through 2.8.5.

Affected Software

3 affected components

Themekraft BuddyForms<=2.8.5

WordPress BuddyForms<=2.8.5

Themekraft Buddyforms Wordpress<2.8.6

Remediation

Information

Update to 2.8.6 or a higher version.

Patch Available

https://patchstack.com/database/vulnerability/buddyforms/wordpress-buddyforms-plugin-2-8-5-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve

Event History

Mar 27, 2024

CVE Published

via MITRE·06:16 AM

Data Sourced

via MITRE·06:16 AM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·07:15 AM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2024-30198?