WordPress Co-marquage service-public.fr Reflected XSS Vulnerability (CVE-2024-10522)

From this webpage screenshot, the following key vulnerability information can be obtained: 1. Vulnerability Name: Co-marquage service-public.fr <= 0.5.76 - Reflected Cross-Site Scripting via add_query_arg Parameter 2. Vulnerability Type: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') 3. CVSS Score: 6.1 (Medium) 4. Public Release Date: November 20, 2024 5. Last Updated Date: November 21, 2024 6. Researcher: vgo0 7. Affected Versions: <= 0.5.76 8. Fixed Version: 0.5.77 9. Vulnerability Description: The Co-marquage service-public.fr plugin for WordPress contains a reflected Cross-Site Scripting (XSS) vulnerability. This occurs because the function does not properly escape input in URLs across all versions (including 0.5.76), allowing unauthorized attackers to inject arbitrary scripts and trick users into performing specific actions, such as clicking links. 10. Reference Links: plugins.trac.wordpress.org, wordpress.org, plugins.trac.wordpress.org 11. Vulnerability Database: Wordfence Intelligence Vulnerability Database 12. Vulnerability ID: CVE-2024-10522 13. Severity Level: Medium (6.1) 14. Public Release Date: November 20, 2024 15. Last Updated Date: November 21, 2024 16. Researcher: vgo0 17. Affected Versions: <= 0.5.76 18. Fixed Version: 0.5.77 19. Vulnerability Description: The Co-marquage service-public.fr plugin for WordPress contains a reflected Cross-Site Scripting (XSS) vulnerability. This occurs because the function does not properly escape input in URLs across all versions (including 0.5.76), allowing unauthorized attackers to inject arbitrary scripts and trick users into performing specific actions, such as clicking links. 20. Reference Links: plugins.trac.wordpress.org, wordpress.org, plugins.trac.wordpress.org 21. Vulnerability Database: Wordfence Intelligence Vulnerability Database 22. Vulnerability ID: CVE-2024-10522 23. Severity Level: Medium (6.1) 24. Public Release Date: November 20, 2024 25. Last Updated Date: November 21, 2024 26. Researcher: vgo0 27. Affected Versions: <= 0.5.76 28. Fixed Version: 0.5.77 29. Vulnerability Description: The Co-marquage service-public.fr plugin for WordPress contains a reflected Cross-Site Scripting (XSS) vulnerability. This occurs because the function does not properly escape input in URLs across all versions (including 0.5.76), allowing unauthorized attackers to inject arbitrary scripts and trick users into performing specific actions, such as clicking links. 30. Reference Links: plugins.trac.wordpress.org, wordpress.org, plugins.trac.wordpress.org 31. Vulnerability Database: Wordfence Intelligence Vulnerability Database 32. Vulnerability ID: CVE-2024-10522 33. Severity Level: Medium (6.1) 34. Public Release Date: November 20, 2024 35. Last Updated Date: November 21, 2024 36. Researcher: vgo0 37. Affected Versions: <= 0.5.76 38. Fixed Version: 0.5.77 39. Vulnerability Description: The Co-marquage service-public.fr plugin for WordPress contains a reflected Cross-Site Scripting (XSS) vulnerability. This occurs because the function does not properly escape input in URLs across all versions (including 0.5.76), allowing unauthorized attackers to inject arbitrary scripts and trick users into performing specific actions, such as clicking links. 40. Reference Links: plugins.trac.wordpress.org, wordpress.org, plugins.trac.wordpress.org 41. Vulnerability Database: Wordfence Intelligence Vulnerability Database 42. Vulnerability ID: CVE-2024-10522 43. Severity Level: Medium (6.1) 44. Public Release Date: November 20, 2024 45. Last Updated Date: November 21, 2024 46. Researcher: vgo0 47. Affected Versions: <= 0.5.76 48. Fixed Version: 0.5.77 49. Vulnerability Description: The Co-marquage service-public.fr plugin for WordPress contains a reflected Cross-Site Scripting (XSS) vulnerability. This occurs because the function does not properly escape input in URLs across all versions (including 0.5.76), allowing unauthorized attackers to inject arbitrary scripts and trick users into performing specific actions, such as clicking links. 50. Reference Links: plugins.trac.wordpress.org, wordpress.org, plugins.trac.wordpress.org 51. Vulnerability Database: Wordfence Intelligence Vulnerability Database 52. Vulnerability ID: CVE-2024-10522 53. Severity Level: Medium (6.1) 54. Public Release Date: November 20, 2024 55. Last Updated Date: November 21, 2024 56. Researcher: vgo0 57. Affected Versions: <= 0.5.76 58. Fixed Version: 0.5.77 59. Vulnerability Description: The Co-marquage service-public.fr plugin for WordPress contains a reflected Cross-Site Scripting (XSS) vulnerability. This occurs because the function does not properly escape input in URLs across all versions (including 0.5.76), allowing unauthorized attackers to inject arbitrary scripts and trick users into performing specific actions, such as clicking links. 60. Reference Links: plugins.trac.wordpress.org, wordpress.org, plugins.trac.wordpress.org 61. Vulnerability Database: Wordfen

Goal Reached Thanks to every supporter — we hit 100%!

WordPress Co-marquage service-public.fr Reflected XSS Vulnerability (CVE-2024-10522)

More from this source