CVE-2024-56289

WordPress Groundhogg plugin <= 3.7.3.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Groundhogg Inc. Groundhogg allows Reflected XSS.This issue affects Groundhogg: from n/a through 3.7.3.3.

Affected

Adrian Tobey · Groundhogg

CVSS v3.1 PATCHSTACK

7.1 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

EPSS

0.72% chance of exploitation in the next 30 days, 53rd percentile

Published

2025-01-07

Updated

2026-04-28

Proof-of-concept exploits (1)

• DoTTak/CVE-2024-562890★ · 2025-01-06

References

• CVE Record
• NVD entry

Related

• CVE-2024-56278
• CVE-2025-22352
• CVE-2025-22510
• CVE-2025-22652
• CVE-2025-22710
• CVE-2025-22783