PT-2024-35039 · Codemenschen · Codemenschen Wp Virtual Room Configurator

Soprobro · Published 2024-11-19 · Updated 2024-11-19 · CVE-2024-51907

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions codemenschen WP Virtual Room Configurator versions 1.0.0 and earlier

Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows Stored XSS, which can be exploited for remote attacks.

Recommendations For codemenschen WP Virtual Room Configurator versions 1.0.0 and earlier: Update the plugin to a patched version immediately if used.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2024-51907

Affected Products

Codemenschen Wp Virtual Room Configurator

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2024-51907 · Security Note
• https://patchstack.com/database/vulnerability/configure-conference-room/wordpress-wp-virtual-room-configurator-plugin-1-0-0-cross-site-scripting-xss-vulnerability?_s_id=cve · Note
• https://patchstack.com/database/Wordpress/Plugin/configure-conference-room/vulnerability/wordpress-wp-virtual-room-configurator-plugin-1-0-0-cross-site-scripting-xss-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/1858926826628018503 · Twitter Post
• https://twitter.com/oktsec/status/1859003171508564380 · Twitter Post