Vulnerability · Published Mar 27, 2024 · Assigned by Patchstack
CVE-2024-29795WordPress Media Cloud for Amazon S3, Cloudflare R2, Google Cloud Storage, DigitalOcean Spaces and more plugin <= 4.5.24 - Cross Site Scripting (XSS) vulnerability
Medium 6.5
In plain English
A medium-severity cross-site scripting in Media Cloud for Amazon S3, Imgix, Google Cloud Storage, DigitalOcean Spaces and more from Interfacelab. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 29% of all known vulnerabilities).
Official description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Interfacelab Media Cloud for Amazon S3, Imgix, Google Cloud Storage, DigitalOcean Spaces and more allows Stored XSS.This issue affects Media Cloud for Amazon S3, Imgix, Google Cloud Storage, DigitalOcean Spaces and more: from n/a through 4.5.24.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Interfacelab | Media Cloud for Amazon S3, Imgix, Google Cloud Storage, DigitalOcean Spaces and more | n/a – through 4.5.24 |
Weakness: CWE-79 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L