CVE-2024-11377

Summary

CVE-2024-11377 is a Reflected Cross-Site Scripting (XSS) vulnerability affecting the Automate Hub Free plugin for WordPress by Sperse.IO. Versions up to and including 1.7.0 are impacted by this issue. The 'id' parameter is the point of entry, and attackers can exploit this vulnerability by injecting arbitrary web scripts due to insufficient input sanitization and output escaping. Unauthenticated attackers can successfully trick users into performing actions like clicking on a malicious link, allowing the attacker's scripts to execute on the targeted pages.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.