CVE-2024-11254

Summary

CVE-2024-11254 is a Reflected Cross-Site Scripting (XSS) vulnerability affecting the AMP for WP – Accelerated Mobile Pages plugin for WordPress. Versions up to and including 1.1.1 are impacted by this issue.attackers can exploit this weakness by injecting arbitrary web scripts via the disqus_name parameter. This vulnerability allows unauthenticated attackers to execute malicious code on pages that unsuspecting users may visit, following a successful social engineering attack, such as clicking on a malicious link. The lack of proper input validation in the plugin exposes WordPress sites to this security risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.