Cross-site Scripting Vulnerability in Inline Footnotes by Gavin Rehkemper

CVE-2024-56019

What is CVE-2024-56019?

A vulnerability exists in the Inline Footnotes plugin developed by Gavin Rehkemper, which leads to improper neutralization of user input during web page generation. This results in a Stored Cross-site Scripting (XSS) vulnerability, allowing attackers to inject malicious scripts into web pages viewed by users. The issue impacts all versions of Inline Footnotes up to and including version 2.3.0, creating critical security risks for users who have not updated their installations. It is essential for site administrators to take immediate action to mitigate potential exploitation of this vulnerability.

References