CVE-2024-0896

Summary

CVE-2024-0896 is a stored Cross-Site Scripting (XSS) vulnerability affecting the Beaver Builder plugin for WordPress, versions up to and including 2.7.4.2. Malicious code can be injected through the button link parameter, allowing authenticated attackers with contributor access or higher to execute arbitrary web scripts. This vulnerability poses a significant risk as the injected scripts will run whenever a user accesses an injected page.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.