CVE-2024-11188

Summary

CVE-2024-11188 is a newly disclosed vulnerability affecting the Formidable Forms plugin for WordPress. The issue lies in the plugin's lack of proper input sanitization and output escaping for the Custom HTML Form parameters, making it susceptible to POST-Based Reflected Cross-Site Scripting attacks. Unauthenticated attackers can inject arbitrary web scripts into pages, potentially leading to data theft or account takeover. Versions up to, and including, 6.16.1.2 are affected. Users are advised to update the plugin to the latest version as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.