CVE-2024-35655

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Brave Brave Popup Builder allows Stored XSS.This issue affects Brave Popup Builder: from n/a through 0.6.9.

How to fix CVE-2024-35655

To remediate CVE-2024-35655, upgrade the affected package to a fixed version below.

Bitnami/wordpress—upgrade to 0.7.0 or later
Bitnami/wordpress-multisite—upgrade to 0.7.0 or later

Is CVE-2024-35655 being exploited?

Low — EPSS is 0.1%, meaning exploitation activity has not been observed at scale.

Affected packages (2)

from 0, < 0.7.0
from 0, < 0.7.0

CVSS scores

Source	Version	Severity	Vector
osv	CVSS 3.1	MEDIUM5.9	CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L

References (1)

WEBpatchstack.com/database/vulnerability/brave-popup-builder/wordpress-brave-interactive-content-plugin-0-6-8-cross-site-scripting-xss-vulnerability?_s_id=cve