CVE-2024-43300

NVD Published Date: October 18, 2024 at 11:15 AM

NVD Last Modified: October 22, 2024 at 03:35 PM

Download Patch

Vulnerability ID

CVE-2024-43300

Severity

MEDIUM

Severity Score

4.8

Summary

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Bert Kößler Movie Database allows Stored XSS.This issue affects Movie Database: from n/a through 1.0.11.

References

https://patchstack.com/database/vulnerability/movie-database/wordpress-movie-database-plugin-1-0-11-cross-site-scripting-xss-vulnerability?_s_id=cve

Mitigation and Patches

Exploits

Metasploit Payload

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

CWE ID

CWE-79

Recent Publish

CVE-2024-47240

KB5044285

KB5044286

CVE-2023-6729

CVE-2023-6728

KB5044288

See SecOps Solution
in action

Schedule Demo

CVE-2024-43300

Recent Publish

See SecOps Solution
in action

Products

Compare

Company

Resources

Try It

CVE-2024-43300

Recent Publish

See SecOps Solutionin action

Products

Compare

Company

Resources

Try It

See SecOps Solution
in action