Stored XSS Vulnerability in WPMobile.App
CVE-2024-43933

7.1HIGH

Key Information:

Vendor

WordPress
Status
WPmobile.app
Vendor
CVE Published:
31 October 2024

What is CVE-2024-43933?

The WPMobile.App plugin is vulnerable to Cross-Site Request Forgery (CSRF), which allows an attacker to perform actions on behalf of an authenticated user without their consent. This can lead to Stored Cross-Site Scripting (XSS) vulnerabilities, compromising the security and integrity of the user's data. Affected versions include all versions up to 11.48. Users of this plugin should take action to prevent exploitation of this vulnerability.

Affected Version(s)

WPMobile.App 0 <= 11.48

References

https://patchstack.com/database/Wordpress/Plugin/wpappnin...
vdb-entry

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

.