XSS Vulnerability in SVG Captcha Plugin Affecting WordPress
CVE-2024-49648
Currently unrated
What is CVE-2024-49648?
A reflected XSS vulnerability exists in the SVG Captcha plugin for WordPress, which fails to properly neutralize user input during web page generation. This security flaw allows attackers to inject malicious scripts through the input fields, potentially compromising the integrity and security of user sessions. The vulnerability affects all versions from n/a through 1.0.11. Users of this plugin should take immediate action to mitigate risks.
Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
SVG Captcha 0 <= 1.0.11