CVE-2024-56026: WordPress Simple Proxy plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Greg – SiteOrigin Simple Proxy simple-proxy allows Reflected XSS.This issue affects Simple Proxy: from n/a through <= 1.0.
Other sources
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Greg – SiteOrigin Simple Proxy simple-proxy allows Reflected XSS.This issue affects Simple Proxy: from n/a through <= 1.0.
— NVD
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-56026?
CVE-2024-56026 has a medium severity level due to its potential for reflected cross-site scripting attacks.
How do I fix CVE-2024-56026?
To fix CVE-2024-56026, upgrade Simple Proxy to version 1.0 or later provided by Greg Priday.
What type of vulnerability is CVE-2024-56026?
CVE-2024-56026 is classified as a reflected cross-site scripting (XSS) vulnerability.
Who is affected by CVE-2024-56026?
CVE-2024-56026 affects any installation of Simple Proxy up to and including version 1.0.
What impacts can CVE-2024-56026 have on users?
CVE-2024-56026 can allow attackers to execute arbitrary scripts in the context of a user's browser, compromising sensitive data.