CVE-2024-51677: WordPress Knowledge Base plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerability
Published Nov 4, 2024
·Updated
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ajay Knowledge Base knowledgebase allows Stored XSS.This issue affects Knowledge Base: from n/a through <= 2.2.0.
Affected Software
1 affected component
WebberZone Knowledge Base Wordpress<2.2.1
Remediation
Information
Update to 2.2.1 or a higher version.
Event History
Nov 4, 2024
CVE Published
via MITRE·02:16 PM
Data Sourced
via MITRE·02:16 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·03:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-51677?
CVE-2024-51677 has a high severity level due to its potential for stored cross-site scripting (XSS).
2
How do I fix CVE-2024-51677?
To fix CVE-2024-51677, update the WebberZone Knowledge Base plugin to version 2.2.1 or later.
3
What versions are affected by CVE-2024-51677?
CVE-2024-51677 affects WebberZone Knowledge Base versions from n/a through 2.2.0.
4
What type of vulnerability is CVE-2024-51677?
CVE-2024-51677 is classified as a stored cross-site scripting (XSS) vulnerability.
5
Can CVE-2024-51677 be exploited remotely?
Yes, CVE-2024-51677 can be exploited remotely, allowing attackers to execute malicious scripts in a victim's browser.