CVE-2024-11363

Summary

CVE-2024-11363 is a Reflected Cross-Site Scripting (XSS) vulnerability affecting the Related Posts by Taxonomy plugin for WordPress. Versions up to and including 1.0.16 are impacted by this issue. The vulnerability arises due to the inadequate escaping of URL parameters in the plugin, specifically the use of add_query_arg and remove_query_arg functions without proper sanitization. Unauthenticated attackers can exploit this flaw by injecting malicious scripts into website pages. Successful exploitation requires a user to perform a specified action, such as clicking on a crafted link.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.