CVE Database /
CVE-2024-0508
CVE · Medium
CVE-2024-0508 — Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More [themeisle-companion] < 2.10.28
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2024-0508
|
Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More [themeisle-companion] < 2.10.28 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
Medium
5.4
|
< 2.10.28
|
2.10.28 |
2024-01-15 |
—
|
CVE-2024-0508
The Orbit Fox plugin for WordPress versions prior to 2.10.28 contains a cross-site scripting vulnerability that could permit an attacker to inject and execute malicious scripts on the website, potentially enabling redirects, advertisements, or arbitrary HTML content to be delivered to site visitors. The flaw was discovered by Webbernaut and has been remedied in version 2.10.28 and later. Users should update to the patched version immediately to eliminate this security risk.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings