CVE-2024-10847

Summary

CVE-2024-10847 is a stored Cross-Site Scripting vulnerability affecting the Storely theme for WordPress. This issue, present in all versions up to 16.6, allows authenticated attackers with Contributor-level access or higher to inject malicious display names. Due to insufficient input sanitization and output escaping, the injected scripts are stored and executed whenever a user views an affected page. This can lead to unintended website behavior or unauthorized access, making it essential to update to a patched version of the Storely theme to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.