CVE-2024-47327: WordPress GEO my WP plugin <= 4.5.0.3 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Eyal Fitoussi GEO my WordPress geo-my-wp allows Reflected XSS.This issue affects GEO my WordPress: from n/a through <= 4.5.0.3.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-47327?
CVE-2024-47327 has a high severity rating due to its potential for allowing reflected cross-site scripting (XSS) attacks.
How do I fix CVE-2024-47327?
To fix CVE-2024-47327, upgrade the GEO my WordPress plugin to version 4.5.0.4 or later.
What software is affected by CVE-2024-47327?
CVE-2024-47327 affects the GEO my WordPress plugin versions up to and including 4.5.0.3.
Can CVE-2024-47327 lead to data theft?
Yes, CVE-2024-47327 can potentially lead to data theft or other malicious actions through reflected XSS.
What type of vulnerability is CVE-2024-47327?
CVE-2024-47327 is classified as an improper neutralization of input during web page generation, specifically a reflected XSS vulnerability.