CVE-2024-11107

Summary

CVE-2024-11107 is a vulnerability affecting the System Dashboard plugin for WordPress before version 2.8.15. This issue allows unauthenticated attackers to execute Cross-Site Scripting (XSS) attacks due to the plugin's failure to sanitize and escape certain parameters before outputting them on the page. The exploitation of this vulnerability could lead to the theft or manipulation of user data or privileges, posing a significant risk to WordPress websites using the affected plugin. Users are strongly encouraged to update to the latest version of the plugin to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.