CVE-2024-30200: WordPress BEAR plugin <= 1.1.4.2 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in realmag777 BEAR allows Reflected XSS.This issue affects BEAR: from n/a through 1.1.4.2.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-30200?
CVE-2024-30200 is classified as a reflected cross-site scripting (XSS) vulnerability with the potential to affect users who interact with the compromised application.
How do I fix CVE-2024-30200?
To fix CVE-2024-30200, update the BEAR plugin to version 1.1.4.3 or later where the vulnerability has been addressed.
Which versions of BEAR are affected by CVE-2024-30200?
CVE-2024-30200 affects all versions of BEAR from n/a up to and including version 1.1.4.2.
What is implied by reflective XSS in CVE-2024-30200?
Reflective XSS in CVE-2024-30200 means that an attacker can inject malicious scripts into the web application, which will then execute in the user's browser when they access a certain link.
Is there a workaround for CVE-2024-30200 until I can update?
A temporary workaround for CVE-2024-30200 includes disabling the affected features in the BEAR plugin until an update can be applied.