CVE-2024-51605 MEDIUM

CVE-2024-51605: WordPress Genoo plugin <= 6.0.10 - Cross Site Scripting (XSS) vulnerability

Vendor Genoo

Product Genoo

Weakness CWE-79 · XSS

Published November 9, 2024

Last update May 12, 2026

View on NVD All CVEs

CVSS base score

6.5/10

Attack vector Network

Attack complexity Low

Privileges required Low

User interaction Required

Confidentiality Low

Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L

What the vulnerability does

01Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Genoo Genoo genoo allows DOM-Based XSS.This issue affects Genoo: from n/a through <= 6.0.10.

Key dates

02Disclosure timeline

November 9, 2024 CVE published

May 12, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2024-51605

Related vulnerabilities

04Related CVE

CVE-2024-4525 Campcodes Complete Web-Based School Management System student_payment_details4.php cross site scripting CVE-2025-54729 WordPress Webba Booking Plugin <= 6.0.5 - Cross Site Scripting (XSS) Vulnerability CVE-2025-23036 Cross-Site Scripting (XSS) Reflected endpoint 'pre_cadastro_funcionario.php' parameter 'msg_e' in WeGIA CVE-2022-2684 SourceCodester Apartment Visitor Management System manage-apartment.php cross site scripting CVE-2026-21331 Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79)