CVE-2024-53787: WordPress Random Banner plugin <= 4.2.12 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in M A Vinoth Kumar Random Banner random-banner allows Stored XSS.This issue affects Random Banner: from n/a through <= 4.2.12.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-53787?
CVE-2024-53787 is classified as a medium-severity vulnerability due to its potential for stored Cross-site Scripting (XSS).
How do I fix CVE-2024-53787?
To fix CVE-2024-53787, update the Random Banner plugin to version 4.3.0 or later, which includes the necessary security patches.
What versions of Random Banner are affected by CVE-2024-53787?
CVE-2024-53787 affects Random Banner versions from n/a up to 4.2.9.
What is the nature of the vulnerability in CVE-2024-53787?
CVE-2024-53787 is due to improper neutralization of input during web page generation, allowing for stored XSS attacks.
How does CVE-2024-53787 impact website security?
CVE-2024-53787 can allow malicious users to inject scripts into web pages viewed by other users, compromising their data and privacy.