CVE-2024-35694: WordPress WPMobile.App plugin <= 11.41 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Amauri WPMobile.App wpappninja.This issue affects WPMobile.App: from n/a through <= 11.41.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-35694?
CVE-2024-35694 is classified as a critical vulnerability due to its ability to enable reflected cross-site scripting (XSS) attacks.
How do I fix CVE-2024-35694?
To mitigate CVE-2024-35694, upgrade WPMobile.App to version 11.42 or higher.
What are the potential impacts of CVE-2024-35694?
Exploitation of CVE-2024-35694 can lead to unauthorized access to user data and the possibility of executing malicious scripts in the context of the user's browser.
Which versions of WPMobile.App are affected by CVE-2024-35694?
CVE-2024-35694 affects all versions of WPMobile.App up to and including 11.41.
Who should be concerned about CVE-2024-35694?
Anyone using WPMobile.App versions prior to 11.42 should be concerned about CVE-2024-35694 and take immediate action to upgrade.