CVE-2024-10883
CVSS 3.1 Score 6.1 of 10 (medium)
Details
Published Nov 16, 2024
CWE ID 79
Summary
CVE-2024-10883 is a Reflected Cross-Site Scripting (XSS) vulnerability affecting the SimpleForm – Contact form made simple plugin for WordPress. Versions up to and including 2.2.0 are impacted, and the issue stems from the improper usage of add_query_arg and remove_query_arg functions without sufficient escaping. This flaw allows unauthenticated attackers to inject malicious web scripts into pages, potentially tricking users into executing them by clicking on a crafted link.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.