CVE-2024-9021: Relevanssi < 4.23.1 - Contributor+ Stored XSS
Published Oct 8, 2024
·Updated
In the process of testing the Relevanssi WordPress plugin before 4.23.1, a vulnerability was found that allows you to implement Stored XSS on behalf of the Contributor+ by embedding malicious script, which entails account takeover backdoor
Affected Software
2 affected components
Relevanssi Relevanssi<4.23.1
Relevanssi Relevanssi WordPress<4.23.1
Event History
Oct 8, 2024
CVE Published
via MITRE·06:00 AM
Data Sourced
via MITRE·06:00 AM
DescriptionWeakness
Data Sourced
via NVD·06:15 AM
DescriptionSeverity
Frequently Asked Questions
1
What is the severity of CVE-2024-9021?
CVE-2024-9021 has a high severity rating due to its potential for Stored XSS and account takeover.
2
How do I fix CVE-2024-9021?
To fix CVE-2024-9021, update the Relevanssi plugin to version 4.23.1 or later.
3
Who is affected by CVE-2024-9021?
CVE-2024-9021 affects users of the Relevanssi WordPress plugin prior to version 4.23.1.
4
What type of vulnerability is CVE-2024-9021?
CVE-2024-9021 is a Stored XSS vulnerability, allowing attackers to execute scripts in users' browsers.
5
Can CVE-2024-9021 lead to account takeover?
Yes, CVE-2024-9021 can lead to account takeover by allowing attackers to embed malicious scripts.