CVE-2024-49311: WordPress Edwiser Bridge plugin <= 3.0.7 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WisdmLabs Edwiser Bridge edwiser-bridge allows Stored XSS.This issue affects Edwiser Bridge: from n/a through <= 3.0.7.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-49311?
CVE-2024-49311 is classified as a Stored Cross-Site Scripting (XSS) vulnerability which can lead to serious security risks.
How do I fix CVE-2024-49311?
To fix CVE-2024-49311, update the WisdmLabs Edwiser Bridge to version 3.0.8 or later.
What versions of WisdmLabs Edwiser Bridge are affected by CVE-2024-49311?
CVE-2024-49311 affects all versions of WisdmLabs Edwiser Bridge up to and including version 3.0.7.
What are the potential impacts of CVE-2024-49311?
The potential impacts of CVE-2024-49311 may include data theft, session hijacking, and unauthorized actions on behalf of users.
Is user interaction required to exploit CVE-2024-49311?
Yes, user interaction is typically required to exploit CVE-2024-49311, as it involves triggering the malicious payload via the web application.