Lucene search
HistoryMay 08, 2024 - 4:15 a.m.
CVE-2024-32674
heateor social login
wordpress
cross-site scripting
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
AI Score
8.9
Confidence
High
EPSS
0
Percentile
9.0%
Heateor Social Login WordPress prior to 1.1.32 contains a cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who accessed the website using the product.
Related
jvn
jvn
cvelist
cvelist
CVE-2024-32674
2024-05-08 03:37:49
wpvulndb
wpvulndb
vulnrichment
vulnrichment
CVE-2024-32674
2024-05-08 03:37:49
cve
cve
CVE-2024-32674
2024-05-08 04:15:09
wordfence
wordfence
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
AI Score
8.9
Confidence
High
EPSS
0
Percentile
9.0%
Related for NVD:CVE-2024-32674