CVE-2024-32576: WordPress BA Book Everything plugin <= 1.6.8 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Booking Algorithms BA Book Everything allows Stored XSS.This issue affects BA Book Everything: from n/a through 1.6.8.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-32576?
CVE-2024-32576 is considered a high severity vulnerability due to its potential for stored cross-site scripting (XSS) exploits.
How do I fix CVE-2024-32576?
To remediate CVE-2024-32576, update the Booking Algorithms BA Book Everything plugin to version 1.6.9 or higher.
What versions of BA Book Everything are affected by CVE-2024-32576?
CVE-2024-32576 affects all versions of BA Book Everything up to and including 1.6.8.
What type of vulnerability is CVE-2024-32576?
CVE-2024-32576 is classified as a stored cross-site scripting (XSS) vulnerability.
Can CVE-2024-32576 be exploited remotely?
Yes, CVE-2024-32576 can be exploited remotely if an attacker is able to inject malicious scripts into web pages accessed by users.