Reflected XSS Vulnerability in Featured Posts with Multiple Custom Groups
CVE-2024-48032
Key Information:
- Vendor
WordPress
- Vendor
- CVE Published:
- 17 October 2024
What is CVE-2024-48032?
The vulnerability associated with the Featured Posts with Multiple Custom Groups plugin poses a risk through improper neutralization of input when generating web pages. This reflected cross-site scripting (XSS) issue allows attackers to inject malicious scripts, which can be executed in the context of a user's session. Users of the affected versions of the plugin are potentially at risk, as the vulnerability may be exploited to compromise personal information or facilitate further attacks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Featured Posts with Multiple Custom Groups (FPMCG) <= 4.0
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved