CVE-2024-30429

MEDIO 5.4CVE-2024-30429 · Published 29/03/2024 · updated 17/06/2026

In breve

CVE-2024-30429 è una vulnerabilità MEDIO (CVSS 5.4) che riguarda wp-forecast (tuxlog).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.35%, superiore al 28.6% delle vulnerabilità.
Correzione: aggiornare a 9.3 o successiva.

Package	Affected versions	Patched versions
wp-forecast tuxlog	`< 9.3`	`9.3`

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Hans Matzen allows Stored XSS.This issue affects wp-forecast: from n/a through 9.2.

References

patchstack.com/database/vulnerability/wp-forecast/wordpress-wp-forecast-plugin-9-2-cross-site-scripting-xss-vulnerability · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free