Cross-site Scripting Vulnerability in Advanced Access Manager

CVE-2024-29127

What is CVE-2024-29127?

A reflected Cross-Site Scripting (XSS) vulnerability exists in the Advanced Access Manager plugin developed by AAM. This flaw occurs due to improper neutralization of input during web page generation, allowing attackers to inject malicious scripts into dynamic content. Users who access a crafted link could inadvertently execute harmful scripts in their browsers, potentially leading to data theft, session hijacking, or other malicious activities. Affected versions range from unspecified release through 6.9.20, highlighting the importance of applying security patches and updates.

References