CVE-2024-11379

Summary

CVE-2024-11379 is a Reflected Cross-Site Scripting (XSS) vulnerability affecting the Broadcast plugin in WordPress. This issue, present in all versions up to 51.01, stems from a lack of proper input sanitization and output escaping, allowing unauthenticated attackers to inject malicious web scripts. Successful exploitation requires tricking a user into clicking on a specially crafted link. This vulnerability only poses a threat to multi-site WordPress installations.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.