CVE-2024-30440: WordPress Themify Event Post plugin <= 1.2.7 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themify Themify Event Post allows Stored XSS.This issue affects Themify Event Post: from n/a through 1.2.7.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-30440?
CVE-2024-30440 has a moderate severity rating due to its potential for enabling Stored XSS attacks.
How do I fix CVE-2024-30440?
To fix CVE-2024-30440, update the Themify Event Post plugin to the latest version that addresses this vulnerability.
What versions are affected by CVE-2024-30440?
CVE-2024-30440 affects Themify Event Post versions up to and including 1.2.7.
What type of vulnerability is CVE-2024-30440?
CVE-2024-30440 is a Cross-site Scripting (XSS) vulnerability related to improper neutralization of input during web page generation.
Can I use Themify Event Post if I'm running an affected version for testing?
It is strongly discouraged to use affected versions of Themify Event Post like 1.2.7 for testing due to security risks associated with Stored XSS.