Cyber Posture

CVE-2024-56028

High

Published: 02 January 2025

Published
02 January 2025
Modified
23 April 2026
KEV Added
Patch
CVSS Score 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
EPSS Score 0.0014 34.2th percentile
Risk Priority 14 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2024-56028 is a high-severity Cross-site Scripting (CWE-79) vulnerability. Its CVSS base score is 7.1 (High).

Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked at the 34.2th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

The strongest mitigations our analysis identified are NIST 800-53 SI-10 (Information Input Validation) and SI-15 (Information Output Filtering).

Threat & Defense at a Glance

What attackers do: exploitation maps to Exploit Public-Facing Application (T1190) and 1 other technique. What defenders deploy: see the NIST 800-53 controls recommended below.
Threat & Defense Details

Mitigating Controls (NIST 800-53 r5)AI

prevent

Filters information outputs during web page generation to neutralize reflected XSS payloads before they are rendered as executable scripts.

prevent

Validates untrusted inputs to the WordPress plugin to reject or sanitize malicious XSS scripts prior to processing.

prevent

Remediates the specific reflected XSS flaw in the lemonade-sna-pinterest-edition plugin through timely security updates and patching.

MITRE ATT&CK Enterprise TechniquesAI

T1190 Exploit Public-Facing Application Initial Access
Adversaries may attempt to exploit a weakness in an Internet-facing host or system to initially access a network.
T1189 Drive-by Compromise Initial Access
Adversaries may gain access to a system through a user visiting a website over the normal course of browsing.
Why these techniques?

Reflected XSS in public-facing WordPress plugin directly enables exploitation of web application (T1190) and supports drive-by compromise via crafted malicious links (T1189).

Confidence: MEDIUM · MITRE ATT&CK Enterprise v18.1

NVD Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in lemonadestudio Lemonade Social Networks Autoposter Pinterest lemonade-sna-pinterest-edition allows Reflected XSS.This issue affects Lemonade Social Networks Autoposter Pinterest: from n/a through <= 2.0.

Deeper analysisAI

CVE-2024-56028 is an Improper Neutralization of Input During Web Page Generation vulnerability, classified as Reflected Cross-site Scripting (XSS) under CWE-79, in the lemonadestudio Lemonade Social Networks Autoposter Pinterest WordPress plugin (lemonade-sna-pinterest-edition). The issue affects all versions from n/a through 2.0 inclusive, with a CVSS v3.1 base score of 7.1 (AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L).

The vulnerability can be exploited by unauthenticated attackers over the network with low attack complexity, though it requires user interaction such as clicking a malicious link. Successful exploitation enables reflected XSS, potentially allowing attackers to inject malicious scripts into web pages viewed by users, leading to low impacts on confidentiality, integrity, and availability with a changed scope.

Mitigation details are available in the Patchstack advisory at https://patchstack.com/database/Wordpress/Plugin/lemonade-sna-pinterest-edition/vulnerability/wordpress-lemonade-social-networks-autoposter-pinterest-plugin-2-0-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve.

Details

CWE(s)

CVEs Like This One

CVE-2026-26276Shared CWE-79
CVE-2025-13002Shared CWE-79
CVE-2025-68838Shared CWE-79
CVE-2026-1216Shared CWE-79
CVE-2025-28917Shared CWE-79
CVE-2025-67984Shared CWE-79
CVE-2025-69318Shared CWE-79
CVE-2026-1931Shared CWE-79
CVE-2025-23994Shared CWE-79
CVE-2025-27500Shared CWE-79

References