CVE-2024-11914

Summary

CVE-2024-11914 is a stored cross-site scripting vulnerability affecting the Attire Blocks plugin for WordPress, specifically the 'attire-blocks/post-carousel' block. This issue, present in all versions up to 1.9.5, stems from insufficient input sanitization and output escaping. Consequentially, authenticated attackers with Contributor-level access or higher can inject malicious web scripts. These scripts will execute whenever a user visits an injected page, posing a significant security risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.