CVE-2024-50458: WordPress Advanced Sermons plugin <= 3.4 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP CodeUs Advanced Sermons advanced-sermons allows Stored XSS.This issue affects Advanced Sermons: from n/a through <= 3.4.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-50458?
CVE-2024-50458 has a moderate severity level due to its ability to allow stored cross-site scripting (XSS) attacks.
How do I fix CVE-2024-50458?
To fix CVE-2024-50458, update the WP Codeus Advanced Sermons plugin to version 3.5 or higher.
What are the potential impacts of CVE-2024-50458?
The potential impacts of CVE-2024-50458 include unauthorized access to sensitive user data and the ability for attackers to execute scripts in the context of the user's session.
Which versions of Advanced Sermons are affected by CVE-2024-50458?
CVE-2024-50458 affects all versions of Advanced Sermons up to and including version 3.4.
Is there a workaround for CVE-2024-50458 if I cannot update?
If updating is not an option for CVE-2024-50458, consider disabling the plugin until a fix can be applied.