CVE-2024-49633: WordPress DirectoryPress plugin <= 3.6.19 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Designinvento DirectoryPress directorypress allows Reflected XSS.This issue affects DirectoryPress: from n/a through <= 3.6.19.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-49633?
CVE-2024-49633 is classified as a medium severity vulnerability due to its potential to allow reflected cross-site scripting attacks.
How do I fix CVE-2024-49633?
To fix CVE-2024-49633, update Designinvento DirectoryPress to version 3.6.20 or later.
What types of attacks can occur due to CVE-2024-49633?
CVE-2024-49633 allows attackers to execute arbitrary JavaScript code in the context of the user's browser through reflected cross-site scripting.
Which versions of DirectoryPress are affected by CVE-2024-49633?
CVE-2024-49633 affects all versions of DirectoryPress up to and including 3.6.19.
Is CVE-2024-49633 specific to a certain platform?
CVE-2024-49633 is specifically related to the Designinvento DirectoryPress plugin used within WordPress.