CVE-2024-11332

Summary

CVE-2024-11332: This vulnerability affects the HIPAA Compliant Forms plugin for WordPress. The issue lies in the 'hipaatizer' shortcode, which lacks sufficient input sanitization and output escaping on user-supplied attributes. Authenticated attackers with contributor-level access or higher can exploit this Stored Cross-Site Scripting (XSS) weakness to inject arbitrary web scripts. These scripts execute whenever a user accesses an injected page, posing a significant security risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.