Cross-site Scripting Vulnerability in Appcheap.Io App Builder
CVE-2024-32565

6.5MEDIUM

Key Information:

Vendor

WordPress
Status
App Builder
Vendor
CVE Published:
18 April 2024

What is CVE-2024-32565?

A cross-site scripting vulnerability exists in Appcheap.Io's App Builder, which permits the improper neutralization of input during web page generation. This security flaw enables stored XSS attacks, potentially allowing an attacker to inject malicious scripts that can be executed in the context of the user's browser. Users of affected versions could face risks such as unauthorized actions, data theft, and compromised user accounts. It is essential for users to implement robust security practices and timely updates to mitigate potential threats associated with this vulnerability.

Affected Version(s)

App Builder <= 3.8.8

References

https://patchstack.com/database/vulnerability/app-builder...
vdb-entry

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

.