Cross-site Scripting Vulnerability Affects Netgsm's Web Page Generation
CVE-2024-32544

7.1HIGH

Key Information:

Vendor
WordPress
Status
Netgsm
Vendor
CVE Published:
17 April 2024

Summary

The Cross-site Scripting (XSS) vulnerability in the Netgsm Plugin allows attackers to inject malicious scripts through improper neutralization of user inputs during web page generation. Specifically, this reflected XSS issue affects users interacting with the Netgsm platform, potentially leading to unauthorized actions executed on behalf of the victim. All users of the Netgsm Plugin, particularly those using versions prior to 2.8, are recommended to implement immediate security measures and updates to mitigate any risk associated with this vulnerability.

Affected Version(s)

Netgsm <= 2.8

References

https://patchstack.com/database/vulnerability/netgsm/word...
vdb-entry

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Majed Refaea (Patchstack Alliance)
.