CVE-2024-47378: WordPress WPCOM Member plugin <= 1.5.4 - Reflected Cross Site Scripting (XSS) vulnerability
Published Oct 5, 2024
·Updated
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Lomu WPCOM Member wpcom-member allows Reflected XSS.This issue affects WPCOM Member: from n/a through <= 1.5.4.
Affected Software
2 affected components
WordPress WPCOM Member<=1.5.4
WPCOM Wpcom Member Wordpress<1.5.4.1
Remediation
Information
Update to 1.5.4.1 or a higher version.
Event History
Oct 5, 2024
CVE Published
via MITRE·03:10 PM
Data Sourced
via MITRE·03:10 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·03:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-47378?
The severity of CVE-2024-47378 is classified as high due to its potential for exploited reflected XSS attacks.
2
How do I fix CVE-2024-47378?
To fix CVE-2024-47378, update your WPCOM Member plugin to version 1.5.5 or higher.
3
What software is affected by CVE-2024-47378?
CVE-2024-47378 affects the WPCOM Member plugin for WordPress versions up to and including 1.5.4.
4
What type of vulnerability is CVE-2024-47378?
CVE-2024-47378 is categorized as a reflected Cross-Site Scripting (XSS) vulnerability.
5
Can CVE-2024-47378 be exploited remotely?
Yes, CVE-2024-47378 can be exploited remotely by an attacker through crafted web requests.