CVE-2024-31111: WordPress Core < 6.5.5 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Automattic WordPress allows Stored XSS.This issue affects WordPress: from 6.5 through 6.5.4, from 6.4 through 6.4.4, from 6.3 through 6.3.4, from 6.2 through 6.2.5, from 6.1 through 6.1.6, from 6.0 through 6.0.8, from 5.9 through 5.9.9.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-31111?
CVE-2024-31111 is considered a moderate severity vulnerability due to its potential for Stored XSS attacks.
How do I fix CVE-2024-31111?
To fix CVE-2024-31111, upgrade WordPress to version 6.5.5 or later.
What versions of WordPress are affected by CVE-2024-31111?
CVE-2024-31111 affects WordPress versions from 5.9 up to and including 6.5.4.
What kind of attack does CVE-2024-31111 enable?
CVE-2024-31111 enables Stored Cross-site Scripting (XSS) attacks through improper input neutralization.
Is CVE-2024-31111 easy to exploit?
CVE-2024-31111 can be exploited by attackers with access to input fields, making it a significant risk for vulnerable sites.