Reflected XSS Vulnerability in Uncanny Automator Pro
CVE-2024-37117

7.1HIGH

Key Information:

Vendor

WordPress
Status
Uncanny Automator Pro
Vendor
CVE Published:
22 July 2024

What is CVE-2024-37117?

A reflected XSS vulnerability has been identified in Uncanny Owl's Uncanny Automator Pro, allowing attackers to inject malicious scripts through improperly validated user inputs during web page generation. This security flaw affects versions ranging from n/a up to 5.3, posing significant risks to users by enabling the execution of harmful scripts on their browsers. Website administrators are strongly advised to update to the latest version to safeguard against potential exploitation.

Affected Version(s)

Uncanny Automator Pro <= 5.3

References

https://patchstack.com/database/vulnerability/uncanny-aut...
vdb-entry

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Dave Jong (Patchstack)
.