Reflected XSS Vulnerability in Bing Search API Integration
CVE-2024-51692
Key Information:
- Vendor
WordPress
- Vendor
- CVE Published:
- 9 November 2024
What is CVE-2024-51692?
The Bing Search API Integration by Askew Brook is susceptible to a reflected cross-site scripting (XSS) vulnerability, stemming from inadequate input neutralization during web page generation. This flaw enables attackers to inject malicious scripts through vulnerable request parameters, potentially compromising the security of user sessions and data integrity. The vulnerability affects versions from n/a through 0.3.3, making it crucial for users to assess their systems and apply necessary security measures to mitigate the risks associated with such vulnerabilities.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Bing Search API Integration <= 0.3.3
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved