CVSS 3.1 Score 7.1 of 10 (high)


Published Mar 27, 2024


CVE-2024-29774 is a vulnerability categorized as CWE-79 (Improper Neutralization of Input During Web Page Generation) and has a base severity of HIGH with a score of 7.1. It affects WP Directory Kit versions from n/a through 1.2.9. The vulnerability allows for the possibility of Reflected Cross-Site Scripting (XSS) attacks. The exploitability score is 2.8 and it requires user interaction to be successful. The impact on integrity and confidentiality is low, but the potential danger lies in unauthorized access to sensitive information or the ability to execute malicious code on affected systems that could lead to further compromise. Remediation actions should include updating WP Directory Kit to a version that addresses this vulnerability promptly to mitigate the risk posed by exploitation from an attacker over the network.

Note: The provided information is based on the available data; however, additional details may be necessary for a comprehensive analysis of this vulnerability.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2024-29774 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options