Cross-site Scripting (XSS) Vulnerability in WP 404 Auto Redirect to Similar Post
CVE-2024-32559

7.1HIGH

Key Information:

Vendor

WordPress
Status
WP 404 Auto Redirect To Similar Post
Vendor
CVE Published:
18 April 2024

What is CVE-2024-32559?

The improper neutralization of input during web page generation in the Hwk-FR WP 404 Auto Redirect to Similar Post plugin results in a reflected cross-site scripting vulnerability. This allows attackers to execute arbitrary JavaScript in the context of the victim's browser. Users of the plugin are potentially at risk, as malicious scripts could be injected into the web pages without proper validation. The vulnerability affects all versions from n/a through 1.0.4, underscoring the importance of prompt updates and enhanced security measures.

Affected Version(s)

WP 404 Auto Redirect to Similar Post <= 1.0.4

References

https://patchstack.com/database/vulnerability/wp-404-auto...
vdb-entry

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

.