CVE-2024-22282

CVSS 3.1 Score 7.1 of 10 (high)

Details

Published Jan 31, 2024
Updated: Feb 6, 2024
CWE ID 79

Summary

CVE-2024-22282 is a vulnerability categorized as CWE-79 (Improper Neutralization of Input During Web Page Generation) affecting the SimpleMap Store Locator plugin by Michael Torbert. The vulnerability allows for 'Cross-site Scripting' attacks through reflected XSS. The affected versions of SimpleMap Store Locator range from n/a to 2.6.1. This vulnerability has a base severity rating of HIGH with a base score of 7.1 according to the CVSS:3.1 rating system. The exploitability score is 2.8, indicating a moderate level of difficulty for attackers to exploit it. No privileges are required, but user interaction is necessary for the attack to be successful. The impact on integrity and confidentiality is low, while availability impact is also low. Organizations using affected versions of SimpleMap Store Locator should update to the latest version or apply any available patches to remediate this vulnerability and reduce the risk it poses to their systems and data security.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2024-22282 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options