CVE-2024-37951: WordPress Magical Posts Display plugin <= 1.2.38 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Noor alam Magical Posts Display – Elementor & Gutenberg Posts Blocks allows Stored XSS.This issue affects Magical Posts Display – Elementor & Gutenberg Posts Blocks: from n/a through 1.2.38.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-37951?
The severity of CVE-2024-37951 is classified as a high-risk vulnerability due to its potential for stored Cross-site Scripting (XSS) attacks.
What software versions are affected by CVE-2024-37951?
CVE-2024-37951 affects version 1.2.38 and earlier of the Noor alam Magical Posts Display – Elementor & Gutenberg Posts Blocks plugin.
How do I fix CVE-2024-37951?
To fix CVE-2024-37951, update the Magical Posts Display plugin to the latest version that addresses this vulnerability.
What type of vulnerability is CVE-2024-37951?
CVE-2024-37951 is an improper neutralization of input during web page generation resulting in a Cross-site Scripting (XSS) vulnerability.
Can CVE-2024-37951 be exploited by attackers?
Yes, CVE-2024-37951 can be exploited by attackers to inject malicious scripts into web pages viewed by other users.