CVE-2024-33696: WordPress WordPress Ad Widget plugin <= 2.20.0 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Broadstreet XPRESS WordPress Ad Widget allows Stored XSS.This issue affects WordPress Ad Widget: from n/a through 2.20.0.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-33696?
CVE-2024-33696 is classified as a high-severity vulnerability due to its potential for stored cross-site scripting attacks.
How do I fix CVE-2024-33696?
To mitigate CVE-2024-33696, update the Broadstreet XPRESS WordPress Ad Widget plugin to a version newer than 2.20.0.
What type of vulnerability is CVE-2024-33696?
CVE-2024-33696 is categorized as a cross-site scripting (XSS) vulnerability that allows for improper neutralization of user input.
Which versions of Broadstreet XPRESS WordPress Ad Widget are affected by CVE-2024-33696?
CVE-2024-33696 affects all versions of Broadstreet XPRESS WordPress Ad Widget from n/a up to and including version 2.20.0.
What can attackers do with CVE-2024-33696?
Attackers exploiting CVE-2024-33696 can execute malicious scripts in the context of a user's browser, leading to potential data theft or session hijacking.