CVE-2024-12096
CVSS 3.1 Score 6.1 of 10 (medium)
Details
Published Dec 24, 2024
Summary
CVE-2024-12096 is a Reflected Cross-Site Scripting (XSS) vulnerability affecting the Exhibit to WP Gallery WordPress plugin before version 0.0.2. This issue arises due to the plugin's failure to sanitize and escape user input, allowing an attacker to inject malicious scripts into web pages viewed by high privilege users, such as admins, causing potential security risks and unintended functionality.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.