Analysis Summary

CVE-2024-52470 CVSS:7.1

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Brainvireinfo Dynamic URL SEO allows Reflected XSS.This issue affects Dynamic URL SEO: from n/a through 1.0.

CVE-2024-52471 CVSS:7.1

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in petesheppard84 Extensions for Elementor allows Reflected XSS.This issue affects Extensions for Elementor: from n/a through 2.0.37.

CVE-2024-52472 CVSS:7.1

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Weather Atlas Weather Atlas Widget allows Reflected XSS.This issue affects Weather Atlas Widget: from n/a through 3.0.1.

CVE-2024-52473 CVSS:7.1

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Sandeep Verma HTML5 Lyrics Karaoke Player allows Reflected XSS.This issue affects HTML5 Lyrics Karaoke Player: from n/a through 2.4.

Impact

• Cross-Site Scripting

Indicators of Compromise

CVE

• CVE-2024-52470
• CVE-2024-52471
• CVE-2024-52472
• CVE-2024-52473

Affected Vendors

Remediation

Upgrade to the latest version, available from the WordPress Plugin Directory.

CVE-2024-52470

CVE-2024-52471

CVE-2024-52472

CVE-2024-52473