Cross-site Scripting Vulnerability in Highlight Plugin by dn88

CVE-2024-56297

What is CVE-2024-56297?

The Highlight plugin developed by dn88 is susceptible to a Stored Cross-site Scripting (XSS) vulnerability. This flaw allows attackers to inject malicious scripts when users access compromised web pages, posing a risk to data integrity and user security. The issue occurs in versions up to 2.0.2, enabling potential exploitation of the web application. It is crucial for users and administrators to apply necessary updates and secure configurations to mitigate this risk.

References