CVE-2024-43233: WordPress BSK Forms Blacklist plugin <= 3.8 - Cross Site Scripting (XSS) vulnerability
Published Aug 12, 2024
·Updated
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in BannerSky BSK Forms Blacklist allows Reflected XSS.This issue affects BSK Forms Blacklist: from n/a through 3.8.
Affected Software
2 affected components
BannerSky BSK Forms Blacklist<=3.8
WordPress BSK Forms Blacklist<=3.8
Remediation
Information
Update to 3.8.1 or a higher version.
Event History
Aug 12, 2024
CVE Published
via MITRE·09:02 PM
Data Sourced
via MITRE·09:02 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·09:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-43233?
CVE-2024-43233 has a high severity level due to its potential for reflected cross-site scripting (XSS) attacks.
2
How do I fix CVE-2024-43233?
To fix CVE-2024-43233, update the BSK Forms Blacklist to a version above 3.8.
3
What software is affected by CVE-2024-43233?
CVE-2024-43233 affects BSK Forms Blacklist versions up to and including 3.8.
4
What type of vulnerability is CVE-2024-43233?
CVE-2024-43233 is classified as an improper neutralization of input during web page generation, leading to reflected XSS.
5
Can CVE-2024-43233 compromise user data?
Yes, CVE-2024-43233 can potentially compromise user data by allowing attackers to execute malicious scripts in users' browsers.