Cross-site Scripting Vulnerability Affects Netgsm's Web Page Generation

CVE-2024-32544

What is CVE-2024-32544?

The Cross-site Scripting (XSS) vulnerability in the Netgsm Plugin allows attackers to inject malicious scripts through improper neutralization of user inputs during web page generation. Specifically, this reflected XSS issue affects users interacting with the Netgsm platform, potentially leading to unauthorized actions executed on behalf of the victim. All users of the Netgsm Plugin, particularly those using versions prior to 2.8, are recommended to implement immediate security measures and updates to mitigate any risk associated with this vulnerability.

References