Reflected Cross-site Scripting Vulnerability in Eniture Technology Distance Based Shipping Calculator
CVE-2024-56301
Key Information:
- Vendor
WordPress
- Vendor
- CVE Published:
- 13 January 2025
What is CVE-2024-56301?
A reflected Cross-site Scripting (XSS) vulnerability exists in the Distance Based Shipping Calculator developed by Eniture Technology. This flaw arises from improper neutralization of user inputs during web page generation, potentially allowing attackers to inject malicious scripts into the application. Successful exploitation could enable unauthorized redirection of users or theft of sensitive information. The vulnerable versions include all releases up to 2.0.21, necessitating immediate attention for users to ensure their sites remain secure.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Distance Based Shipping Calculator <= 2.0.21
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved