CVE-2024-51576

NVD Published Date: November 10, 2024 at 12:15 PM

NVD Last Modified: November 14, 2024 at 02:24 AM

Download Patch

Vulnerability ID

CVE-2024-51576

Severity

MEDIUM

Severity Score

5.4

Summary

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WPZA AMP Img Shortcode allows Stored XSS.This issue affects AMP Img Shortcode: from n/a through 1.0.1.

References

https://patchstack.com/database/vulnerability/amp-img-shortcode/wordpress-amp-img-shortcode-plugin-1-0-1-stored-cross-site-scripting-xss-vulnerability?_s_id=cve

Mitigation and Patches

Exploits

Metasploit Payload

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

CWE ID

CWE-79

Recent Publish

KB5041828

KB5041838

CVE-2024-51707

CVE-2024-51760

KB5041847

KB5041850

See SecOps Solution
in action

Schedule Demo

CVE-2024-51576

Recent Publish

See SecOps Solution
in action

Products

Compare

Company

Resources

Try It

CVE-2024-51576

Recent Publish

See SecOps Solutionin action

Products

Compare

Company

Resources

Try It

See SecOps Solution
in action