CVE-2024-11459

Summary

CVE-2024-11459 is a Reflected Cross-Site Scripting (XSS) vulnerability affecting the Country Blocker plugin for WordPress. This issue, present in all versions up to 3.2, allows unauthenticated attackers to inject arbitrary web scripts. The vulnerability arises due to insufficient input sanitization and output escaping, making it possible for the attacker to trick users into performing actions like clicking on malicious links. Successful exploitation of this vulnerability can result in the execution of malicious code within the context of the affected website.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.