CVE-2024-32674

2024-05-0803:37:49

jpcert

github.com

heateor social login

xss

vulnerability

wordpress

cross-site scripting

6.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

Heateor Social Login WordPress prior to 1.1.32 contains a cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who accessed the website using the product.

CNA Affected

[
  {
    "vendor": "Heateor",
    "product": "Heateor Social Login WordPress",
    "versions": [
      {
        "version": "prior to 1.1.32",
        "status": "affected"
      }
    ]
  }
]