CVE-2024-12162

Summary

CVE-2024-12162 is a Reflected Cross-Site Scripting (XSS) vulnerability affecting the Video & Photo Gallery plugin for WordPress, specifically versions up to and including 1.1.1. This issue stems from insufficient input sanitization and output escaping of the 'page' parameter. As a result, unauthenticated attackers can inject arbitrary web scripts into pages, potentially tricking users into executing malicious code by clicking on a link.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.