CVE-2024-0187

Summary

CVE-2024-0187 is a newly disclosed vulnerability affecting the Community by PeepSo plugin for WordPress. This issue allows for Reflected Cross-Site Scripting (XSS), which means an attacker can inject malicious scripts into web pages viewed by other users. The flaw lies in the plugin's failure to sanitize and escape certain parameters and generated URLs before outputting them back as attributes. This vulnerability poses a significant risk, particularly for high privilege users like admins, and could lead to theft of sensitive information, unauthorized access, or other malicious actions. Users are urged to update to the latest version, 6.3.1.2, to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.