Reflected XSS Vulnerability in Evergreen Content Poster

CVE-2024-29099

What is CVE-2024-29099?

The Evergreen Content Poster plugin for WordPress contains a reflected cross-site scripting (XSS) vulnerability that arises from the improper neutralization of user input during web page generation. This flaw enables attackers to inject malicious scripts into webpages viewed by unsuspecting users. When users interact with the compromised pages or follow manipulated links, they may inadvertently execute harmful scripts. This type of attack can lead to severe implications, including data theft and session hijacking, raising significant concerns for web application security.

References