CVE-2024-10858
CVSS 3.1 Score 6.1 of 10 (medium)
Details
Published Dec 25, 2024
Updated: Dec 26, 2024
Summary
CVE-2024-10858 is a DOM-XSS vulnerability affecting the Jetpack WordPress plugin before version 14.1. In the 13.x versions of the plugin, the origin check for postmessages is not rigorously implemented, allowing unauthorized parties to bypass the security measure and inject malicious code into a website. This issue is exclusive to WordPress.com hosted websites.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Jetpack
Affected Vendors
- WordPress