Cross-site Scripting Vulnerability in Lewe Bootstrap Visuals Plugin by George Lewe
CVE-2024-51810

Currently unrated

Key Information:

Vendor
George Lewe
Status
Lewe Bootstrap Visuals
Vendor
CVE Published:
19 November 2024

Summary

A stored Cross-site Scripting (XSS) vulnerability exists in the Lewe Bootstrap Visuals plugin, which can allow attackers to inject malicious scripts into web pages. This issue impacts all versions through 2.2.2, enabling unauthorized code execution in users' browsers. Proper input validation is essential to mitigate this risk and secure web applications against such vulnerabilities.

References

https://patchstack.com/database/vulnerability/shortcode-b...

Timeline

  • Vulnerability published

.