First published: Tue Nov 19 2024(Updated: )
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Magnetic Creative Inline Click To Tweet allows DOM-Based XSS.This issue affects Inline Click To Tweet: from n/a through 1.0.0.
Credit: audit@patchstack.com
Affected Software | Affected Version | How to fix |
---|---|---|
Click To Tweet | <=1.0.0 | |
WordPress Inline Click To Tweet | <=1.0.0 |
Deactivate and delete.
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2024-51803 is classified as a medium severity vulnerability due to its potential for cross-site scripting attacks.
To mitigate CVE-2024-51803, it is recommended to update the Inline Click To Tweet plugin to a secure version above 1.0.0.
CVE-2024-51803 is an improper neutralization of input during web page generation vulnerability, specifically resulting in DOM-based cross-site scripting (XSS).
CVE-2024-51803 affects Magnetic Creative Inline Click To Tweet versions from n/a up to and including 1.0.0.
Yes, CVE-2024-51803 also affects the WordPress version of Inline Click To Tweet from n/a through 1.0.0.