CVE-2024-35751: WordPress Woody code snippets plugin <= 2.4.10 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Creative Motion, Will Bontrager Software, LLC Woody ad snippets allows Stored XSS.This issue affects Woody ad snippets: from n/a through 2.4.10.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-35751?
CVE-2024-35751 has a high severity rating due to the potential for stored cross-site scripting (XSS) attacks.
How do I fix CVE-2024-35751?
To fix CVE-2024-35751, update the Woody ad snippets plugin to version 2.5.1 or later.
What types of attacks are possible with CVE-2024-35751?
CVE-2024-35751 may allow attackers to execute malicious scripts in the context of the user's browser, leading to data theft or session hijacking.
Which versions of Woody ad snippets are affected by CVE-2024-35751?
CVE-2024-35751 affects Woody ad snippets versions up to and including 2.4.10.
Is my website vulnerable if I use Woody ad snippets?
If you are using Woody ad snippets version 2.4.10 or earlier, your website is vulnerable to CVE-2024-35751.