CVE-2024-12262
CVSS 3.1 Score 6.1 of 10 (medium)
Details
Published Dec 21, 2024
Updated: Feb 28, 2025
CWE ID 79
Summary
CVE-2024-12262: The Ebook Store plugin for WordPress contains a Reflected Cross-Site Scripting vulnerability. This issue, which affects versions up to 5.8011, stems from insufficient sanitization and output escaping of the 'step' parameter. Consequently, unauthenticated attackers can inject malicious web scripts into pages, potentially leading to the execution of harmful code when a user is tricked into clicking a malicious link.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.