6.5 Medium

CVE-2024-37476 Cross Site Scripting (XSS) vulnerability in Automattic Newspack Campaigns allows Stored XSS.This issue affects…

Description

Cross Site Scripting (XSS) vulnerability in Automattic Newspack Campaigns allows Stored XSS.This issue affects Newspack Campaigns: from n/a through 2.31.1.

Affected products and versions

Product	Affected versions	Fixed in
Newspack Campaigns 2.31	earliest → 2.31.1	No fix stated

Do you use Newspack Campaigns?

Track this CVE Watch Newspack Campaigns Check my SBOMs

www.cveye.io/en/cve/CVE-2024-37476

Timeline

Published July 4, 2024
Last modified April 28, 2026

References

patchstack.com patchstack.com

Track this CVE