CVE-2024-11108

Summary

CVE-2024-11108 is a vulnerability affecting the Serious Slider WordPress plugin before version 1.2.7. This issue allows users with the contributor role and above to execute Stored Cross-Site Scripting attacks. The plugin does not properly validate and escape shortcode attributes before outputting them on a page or post where the shortcode is embedded. This vulnerability could potentially be exploited to inject malicious code and compromise the security of a WordPress site. It is strongly recommended that users update to the latest version of the plugin to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.