CVE-2024-12177

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

The Ai Image Alt Text Generator for WP plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 1.0.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
wpmessiah	Ai Image Alt Text Generator for WP	<= 1.0.6

References

Timeline

Published: Jan 30, 2025
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2024

CVE-2024-121787.8A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force a Memory Corruption vulnerability. A malicious actor can CVE-2024-121797.8A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can be used to cause a Heap-based Overflow vulnerability. A malici CVE-2024-12185.4The Contact Form builder with drag & drop for WordPress – Kali Forms plugin for WordPress is vulnerable to unauthorized access and modificat CVE-2024-121805.4A vulnerability classified as problematic has been found in DedeCMS 5.7.116. Affected is an unknown function of the file /member/article_add CVE-2024-121815.4A vulnerability classified as problematic was found in DedeCMS 5.7.116. Affected by this vulnerability is an unknown functionality of the fi CVE-2024-121825.4A vulnerability, which was classified as problematic, has been found in DedeCMS 5.7.116. Affected by this issue is some unknown functionalit CVE-2024-121835.4A vulnerability, which was classified as problematic, was found in DedeCMS 5.7.116. This affects the function RemoveXSS of the file /plus/ca CVE-2024-121845.3The WordPress Contact Forms by Cimatti plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check o CVE-2024-121857.8A vulnerability has been found in code-projects Hotel Management System 1.0 and classified as problematic. This vulnerability affects unknow CVE-2024-121867.8A vulnerability was found in code-projects Hotel Management System 1.0 and classified as problematic. This issue affects some unknown proces CVE-2024-121879.8A vulnerability was found in 1000 Projects Library Management System 1.0. It has been classified as critical. Affected is an unknown functio CVE-2024-121889.8A vulnerability was found in 1000 Projects Library Management System 1.0. It has been declared as critical. Affected by this vulnerability i