CVERadar

CVE-2024-29795

Medium Severity

SVRS

30/100

CVSSv3

NA/10

EPSS

0.00076/1

CVE-2024-29795: Stored Cross-Site Scripting (XSS) vulnerability in Interfacelab Media Cloud. Discover a critical security flaw affecting versions up to 4.5.24, enabling attackers to inject malicious scripts into web pages. Despite a low SVRS of 30, indicating a potentially lower immediate risk, this vulnerability allows for persistent XSS attacks. This means injected scripts are stored on the server, affecting all users who access the compromised page. Successful exploitation could lead to session hijacking, defacement of websites, or redirection to malicious sites. While the CVSS score is 0, the potential for data breaches and compromised user accounts makes addressing CVE-2024-29795 a priority. Users of Interfacelab Media Cloud should update to a patched version as soon as possible.

Indicators of Compromise

No IOCs found for this CVE

Exploits

No exploits found for this CVE

Enhance Your CVE Management with SOCRadar Vulnerability Intelligence

Get comprehensive CVE details, real-time notifications, and proactive threat management all in one platform.

CREATE FREE ACCOUNT

CVE Details

Access comprehensive CVE information instantly

Real-time Tracking

Subscribe to CVEs and get instant updates

Exploit Analysis

Monitor related APT groups and threats

IOC Tracking

Analyze and track CVE-related IOCs

News

CVE-2024-29795 | Interfacelab Media Cloud for Amazon S3, Imgix, Google Cloud Storage, DigitalOcean Spaces Plugin cross site scripting

vuldb.com2025-04-12

CVE-2024-29795 | Interfacelab Media Cloud for Amazon S3, Imgix, Google Cloud Storage, DigitalOcean Spaces Plugin cross site scripting | A vulnerability was found in Interfacelab Media Cloud for Amazon S3, Imgix, Google Cloud Storage, DigitalOcean Spaces Plugin up to 4.5.24 on WordPress. It has been declared as problematic. This vulnerability affects unknown code. The manipulation leads to cross site scripting. This vulnerability was named CVE-2024-29795. The attack can

vuldb.com

rss

forum

news

Social Media

No tweets found for this CVE

Affected Software

No affected software found for this CVE

References

Reference	Link
[email protected]	https://patchstack.com/database/vulnerability/ilab-media-tools/wordpress-media-cloud-for-amazon-s3-cloudflare-r2-google-cloud-storage-digitalocean-spaces-and-more-plugin-4-5-24-cross-site-scripting-xss-vulnerability?_s_id=cve

CWE Details

CWE ID	CWE Name	Description
CWE-79	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')	The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

CVE Radar

Real-time CVE Intelligence & Vulnerability Management Platform

CVE Radar provides comprehensive vulnerability intelligence by monitoring CVE databases, security advisories, and threat feeds. Get instant updates on new vulnerabilities, exploit details, and mitigation strategies specific to your assets.

Get Free Vulnerability Intelligence AccessAccess real-time CVE monitoring, exploit analysis, and threat intelligence