CVE-2024-43915: WordPress Zephyr Project Manager plugin <=3.3.102 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Dylan James Zephyr Project Manager allows Reflected XSS.This issue affects Zephyr Project Manager: from n/a through .3.102.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-43915?
CVE-2024-43915 has a severity rating categorized as high due to its potential for reflected cross-site scripting (XSS) attacks.
How do I fix CVE-2024-43915?
To fix CVE-2024-43915, update your Zephyr Project Manager to version 3.3.103 or later.
What software is affected by CVE-2024-43915?
CVE-2024-43915 affects all versions of Zephyr Project Manager prior to 3.3.103.
What type of vulnerability is CVE-2024-43915?
CVE-2024-43915 is an improper neutralization of input vulnerability during web page generation, commonly known as XSS.
Can CVE-2024-43915 lead to data theft?
Yes, if exploited, CVE-2024-43915 can potentially lead to data theft through malicious scripts being executed in the user's browser.