PT-2024-25404 · Unknown · Kailey Lampert Advanced Most Recent Posts Mod

Ngô Thiên An · Published 2024-04-28 · Updated 2024-04-29 · CVE-2024-33643

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Kailey Lampert Advanced Most Recent Posts Mod versions through 1.6.5.2

Description The issue affects the Kailey Lampert Advanced Most Recent Posts Mod, allowing Stored XSS due to improper neutralization of input during web page generation. This can lead to cross-site scripting attacks.

Recommendations For versions through 1.6.5.2, update to a version later than 1.6.5.2 to resolve the issue. As a temporary workaround, consider restricting user input to minimize the risk of exploitation.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2024-33643

Affected Products

Kailey Lampert Advanced Most Recent Posts Mod

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2024-33643 · Security Note
• https://twitter.com/CVEnew/status/1784814181792809363 · Twitter Post
• https://twitter.com/linuxpatch/status/1784826755997372797 · Twitter Post
• https://patchstack.com/database/vulnerability/advanced-most-recent-posts-mod/wordpress-advanced-most-recent-posts-mod-plugin-1-6-5-2-cross-site-scripting-xss-vulnerability?_s_id=cve · Note