CVE-2024-29112

Summary

CVE-2024-29112 is a vulnerability categorized as CWE-79, which refers to "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')." The vulnerability affects the WooCommerce Google Feed Manager plugin, specifically versions from n/a through 2.2.0. This vulnerability allows for Stored Cross-Site Scripting (XSS) attacks. The risk score is rated at 25, with a base severity of MEDIUM and a base score of 5.9 according to the CVSS v3.1 scoring system. The exploitability score is 1.7, indicating a relatively low difficulty in exploiting the vulnerability. Privileges required for exploitation are rated as HIGH, and user interaction is also required for successful attacks. The attack vector is through the network, and the impact on integrity and confidentiality is considered low. Although the availability impact is also low, this vulnerability poses potential dangers to organizations that use the affected plugin as it can be exploited to inject malicious code into web pages generated by WP Marketing Robot WooCommerce Google Feed Manager. Note: Information has been provided based on the available data from the source text without additional external sources or context.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.