Cross-site Scripting Vulnerability in Lewe Bootstrap Visuals Plugin by George Lewe
CVE-2024-51810

6.5MEDIUM

Key Information:

Vendor

George Lewe

Status
Lewe Bootstrap Visuals
Vendor
CVE Published:
19 November 2024

What is CVE-2024-51810?

A stored Cross-site Scripting (XSS) vulnerability exists in the Lewe Bootstrap Visuals plugin, which can allow attackers to inject malicious scripts into web pages. This issue impacts all versions through 2.2.2, enabling unauthorized code execution in users' browsers. Proper input validation is essential to mitigate this risk and secure web applications against such vulnerabilities.

Affected Version(s)

Lewe Bootstrap Visuals 0 <= 3.0.1

References

https://patchstack.com/database/Wordpress/Plugin/shortcod...
vdb-entry

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

.