WordPress AFI Plugin Reflected XSS Vulnerability (<=1.92.0)

From this webpage screenshot, the following key vulnerability information can be obtained: 1. Vulnerability Name: AFI - The Easiest Integration Plugin <= 1.92.0 - Reflected Cross-Site Scripting 2. Vulnerability Type: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') 3. CVSS Score: 6.1 (Medium) 4. Public Release Date: November 12, 2024 5. Last Updated Date: November 13, 2024 6. Researcher: Peter Thaleikis 7. Vulnerability Description: The AFI plugin improperly handles input during URL processing, leading to reflected cross-site scripting attacks. 8. Affected Versions: <= 1.92.0 9. Fixed Version: 1.92.1 10. Remediation Recommendation: Upgrade to version 1.92.1 or higher. 11. Reference Link: plugins.trac.wordpress.org 12. Vulnerability Database: Wordfence Intelligence Vulnerability Database 13. Vulnerability Score: 6.1 (Medium) 14. Vulnerability Public Date: November 12, 2024 15. Vulnerability Update Date: November 13, 2024 16. Researcher: Peter Thaleikis 17. Vulnerability Description: The AFI plugin improperly handles input during URL processing, leading to reflected cross-site scripting attacks. 18. Affected Versions: <= 1.92.0 19. Fixed Version: 1.92.1 20. Remediation Recommendation: Upgrade to version 1.92.1 or higher. 21. Reference Link: plugins.trac.wordpress.org 22. Vulnerability Database: Wordfence Intelligence Vulnerability Database 23. Vulnerability Score: 6.1 (Medium) 24. Vulnerability Public Date: November 12, 2024 25. Vulnerability Update Date: November 13, 2024 26. Researcher: Peter Thaleikis 27. Vulnerability Description: The AFI plugin improperly handles input during URL processing, leading to reflected cross-site scripting attacks. 28. Affected Versions: <= 1.92.0 29. Fixed Version: 1.92.1 30. Remediation Recommendation: Upgrade to version 1.92.1 or higher. 31. Reference Link: plugins.trac.wordpress.org 32. Vulnerability Database: Wordfence Intelligence Vulnerability Database 33. Vulnerability Score: 6.1 (Medium) 34. Vulnerability Public Date: November 12, 2024 35. Vulnerability Update Date: November 13, 2024 36. Researcher: Peter Thaleikis 37. Vulnerability Description: The AFI plugin improperly handles input during URL processing, leading to reflected cross-site scripting attacks. 38. Affected Versions: <= 1.92.0 39. Fixed Version: 1.92.1 40. Remediation Recommendation: Upgrade to version 1.92.1 or higher. 41. Reference Link: plugins.trac.wordpress.org 42. Vulnerability Database: Wordfence Intelligence Vulnerability Database 43. Vulnerability Score: 6.1 (Medium) 44. Vulnerability Public Date: November 12, 2024 45. Vulnerability Update Date: November 13, 2024 46. Researcher: Peter Thaleikis 47. Vulnerability Description: The AFI plugin improperly handles input during URL processing, leading to reflected cross-site scripting attacks. 48. Affected Versions: <= 1.92.0 49. Fixed Version: 1.92.1 50. Remediation Recommendation: Upgrade to version 1.92.1 or higher. 51. Reference Link: plugins.trac.wordpress.org 52. Vulnerability Database: Wordfence Intelligence Vulnerability Database 53. Vulnerability Score: 6.1 (Medium) 54. Vulnerability Public Date: November 12, 2024 55. Vulnerability Update Date: November 13, 2024 56. Researcher: Peter Thaleikis 57. Vulnerability Description: The AFI plugin improperly handles input during URL processing, leading to reflected cross-site scripting attacks. 58. Affected Versions: <= 1.92.0 59. Fixed Version: 1.92.1 60. Remediation Recommendation: Upgrade to version 1.92.1 or higher. 61. Reference Link: plugins.trac.wordpress.org 62. Vulnerability Database: Wordfence Intelligence Vulnerability Database 63. Vulnerability Score: 6.1 (Medium) 64. Vulnerability Public Date: November 12, 2024 65. Vulnerability Update Date: November 13, 2024 66. Researcher: Peter Thaleikis 67. Vulnerability Description: The AFI plugin improperly handles input during URL processing, leading to reflected cross-site scripting attacks. 68. Affected Versions: <= 1.92.0 69. Fixed Version: 1.92.1 70. Remediation Recommendation: Upgrade to version 1.92.1 or higher. 71. Reference Link: plugins.trac.wordpress.org 72. Vulnerability Database: Wordfence Intelligence Vulnerability Database 73. Vulnerability Score: 6.1 (Medium) 74. Vulnerability Public Date: November 12, 2024 75. Vulnerability Update Date: November 13, 2024 76. Researcher: Peter Thaleikis 77. Vulnerability Description: The AFI plugin improperly handles input during URL processing, leading to reflected cross-site scripting attacks. 78. Affected Versions: <= 1.92.0 79. Fixed Version: 1.92.1 80. Remediation Recommendation: Upgrade to version 1.92.1 or higher. 81. Reference Link: plugins.trac.wordpress.org 82. Vulnerability Database: Wordfence Intelligence Vulnerability Database 83. Vulnerability Score: 6.1 (Medium) 84. Vulnerability Public Date: November 12, 2024 85. Vulnerability Update Date: November 13, 2024 86. Researcher: Peter Thaleikis 87. Vulnerability Description: The AFI plugin improperly handles

Goal Reached Thanks to every supporter — we hit 100%!

WordPress AFI Plugin Reflected XSS Vulnerability (<=1.92.0)

More from this source