PT-2024-25315 · Aa Team · Wzone

Rafie Muhammad · Published 2024-04-28 · Updated 2024-04-30 · CVE-2024-33548

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions AA-Team WZone versions through 14.0.10

Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting', which allows Reflected XSS. This can potentially affect a large number of devices worldwide, although the exact number is not specified. There is no information provided about real-world incidents where this issue was exploited.

Recommendations For versions through 14.0.10, update to a version later than 14.0.10 to resolve the issue. At the moment, there is no information about other specific fixes for this vulnerability.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2024-33548

Affected Products

Wzone

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2024-33548 · Security Note
• https://t.me/cvenotify/78309 · Telegram Post
• https://twitter.com/CVEnew/status/1784819793922535706 · Twitter Post
• https://twitter.com/cracbot/status/1785246814834249948 · Twitter Post
• https://patchstack.com/database/vulnerability/woozone/wordpress-wzone-plugin-14-0-10-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve · Note
• https://twitter.com/linuxpatch/status/1784842241732718609 · Twitter Post