CVE-2024-11356

Summary

CVE-2024-11356 is a vulnerability affecting the tourmaster WordPress plugin before version 5.3.4. This issue permits unauthenticated users to execute Cross-Site Scripting (XSS) attacks. The plugin fails to sanitize and escape certain parameters before outputting them on the page, leaving it susceptible to code injection by attackers. Successful exploitation of this vulnerability could lead to the theft of sensitive user information or the takeover of affected WordPress sites. Users are advised to update to the latest version of the plugin to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.