Cross-Site Scripting Vulnerability in CoolPlugins Coins MarketCap
CVE-2024-56257

6.5MEDIUM

Key Information:

Vendor

WordPress
Status
Coins Marketcap
Vendor
CVE Published:
2 January 2025

What is CVE-2024-56257?

A vulnerability exists in CoolPlugins Coins MarketCap due to improper neutralization of user input during web page generation. This flaw opens the door to DOM-based cross-site scripting (XSS) attacks, enabling malicious actors to inject executable scripts into web pages viewed by users. Such vulnerabilities can compromise user data, manipulate site functionality, and escalate security risks. Affected versions include Coins MarketCap from n/a to 5.5.8. Website administrators are advised to implement the necessary updates to mitigate the effects of this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Coins MarketCap <= 5.5.8

References

https://patchstack.com/database/wordpress/plugin/coins-ma...
vdb-entry

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Trương Hữu Phúc / truonghuuphuc (Patchstack Alliance)
JSON
.