CVE-2024-11934

Summary

CVE-2024-11934 is a stored Cross-Site Scripting (XSS) vulnerability affecting the Formaloo Form Maker & Customer Analytics plugin for WordPress and WooCommerce. This issue, present in all versions up to 2.1.3.2, allows authenticated attackers with Contributor-level access or higher to inject malicious scripts into pages through the 'address' parameter. These scripts will execute whenever a user accesses the affected page, posing a significant security risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.