CVE-2024-24834

CVSS 3.1 Score 5.9 of 10 (medium)

Details

Published Feb 8, 2024
Updated: Feb 15, 2024
CWE ID 79

Summary

CVE-2024-24834 is a vulnerability that affects the BEAR - Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net. The vulnerability is classified as a Stored XSS (Cross-site Scripting) issue. The affected versions of the plugin range from n/a through 1.1.4. The risk score associated with this vulnerability is 26, indicating a medium-level risk. The exploitability score is 1.7, while the base severity score is 5.9, both of which suggest a medium-level threat. The privileges required for exploitation are high, and user interaction is required for the attack to be successful. The attack vector is through the network, and the impact on integrity and confidentiality is low. The availability impact is also low. It is important for organizations utilizing this plugin to remediate the vulnerability promptly to mitigate potential risks associated with unauthorized access to sensitive information or malicious code execution.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2024-24834 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options