CVE-2024-37222: WordPress Master Slider plugin <= 3.10.0 - Reflected Cross Site Scripting (XSS) vulnerability
Published Jun 20, 2024
·Updated
Cross Site Scripting (XSS) vulnerability in Averta Master Slider allows Reflected XSS.This issue affects Master Slider: from n/a through 3.10.0.
Affected Software
3 affected components
averta Master Slider<=3.10.0
WordPress Master Slider plugin<=3.10.0
averta Master Slider Wordpress<3.10.5
Remediation
Information
Update to 3.10.5 or a higher version.
Event History
Jun 20, 2024
CVE Published
via MITRE·02:12 PM
Data Sourced
via MITRE·02:12 PM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-37222?
CVE-2024-37222 is categorized as a moderate severity Cross Site Scripting (XSS) vulnerability.
2
How does CVE-2024-37222 affect Averta Master Slider?
CVE-2024-37222 allows for Reflected XSS attacks, potentially compromising user data in Averta Master Slider versions up to 3.10.0.
3
How do I fix CVE-2024-37222?
To fix CVE-2024-37222, update Averta Master Slider or the WordPress Master Slider plugin to the latest version beyond 3.10.0.
4
Is CVE-2024-37222 present in all versions of Averta Master Slider?
No, CVE-2024-37222 affects Averta Master Slider specifically from earlier versions up to and including 3.10.0.
5
Can CVE-2024-37222 be exploited remotely?
Yes, CVE-2024-37222 can be exploited remotely through crafted requests that trigger the XSS vulnerability.