CVE-2024-30428: WordPress Contest Gallery plugin <= 24.0.3 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery allows Reflected XSS.This issue affects Contest Gallery: from n/a through <= 24.0.3.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-30428?
CVE-2024-30428 is classified as a Reflected XSS vulnerability which can allow attackers to execute arbitrary scripts in a victim's browser.
What products are affected by CVE-2024-30428?
CVE-2024-30428 affects WordPress Contest Gallery versions up to and including 21.3.5.
How do I fix CVE-2024-30428?
To fix CVE-2024-30428, update the Contest Gallery plugin to the latest version or at least beyond version 21.3.5.
What type of vulnerability is CVE-2024-30428?
CVE-2024-30428 is an Improper Neutralization of Input During Web Page Generation, leading to a Cross-site Scripting (XSS) issue.
Can CVE-2024-30428 be exploited remotely?
Yes, CVE-2024-30428 can be exploited remotely through specially crafted requests to the affected web application.