CVE-2024-0897

Summary

CVE-2024-0897: The WordPress plugin Beaver Builder, specifically its version 2.7.4.2 and below, is susceptible to Stored Cross-Site Scripting (XSS) attacks. Authenticated attackers, including those with contributor access or higher, can exploit this vulnerability by injecting malicious scripts into image URL parameters. As a result, these scripts will execute whenever a user visits an affected page. This issue arises due to insufficient input sanitization and output escaping.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.