CVE-2024-43933: WordPress WPMobile.App plugin <= 11.48 - CSRF to Stored XSS vulnerability
Published Oct 31, 2024
·Updated
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Amauri WPMobile.App wpappninja allows Stored XSS.This issue affects WPMobile.App: from n/a through <= 11.48.
Affected Software
1 affected component
Amauri WPMobile.App<=11.48
Remediation
Information
Update to 11.49 or a higher version.
Event History
Oct 31, 2024
CVE Published
via MITRE·10:04 AM
Data Sourced
via MITRE·10:04 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·10:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-43933?
CVE-2024-43933 is rated as a medium severity Cross-Site Request Forgery (CSRF) vulnerability that allows stored Cross-Site Scripting (XSS) in WPMobile.App.
2
How do I fix CVE-2024-43933?
To fix CVE-2024-43933, update your WPMobile.App to version 11.49 or later.
3
Which versions of WPMobile.App are affected by CVE-2024-43933?
CVE-2024-43933 affects WPMobile.App versions from n/a through 11.48.
4
What type of vulnerability is CVE-2024-43933?
CVE-2024-43933 is a Cross-Site Request Forgery (CSRF) vulnerability that can lead to stored XSS.
5
Who is impacted by CVE-2024-43933?
Any users of the WPMobile.App plugin for WordPress, specifically those using versions 11.48 or earlier, are impacted by CVE-2024-43933.