CVE-2024-12308

Summary

CVE-2024-12308: The Logo Slider WordPress plugin, prior to version 4.6.0, contains a vulnerability that fails to validate and properly escape some shortcode attributes. This issue poses a risk, allowing contributors and above to execute Stored Cross-Site Scripting attacks by injecting malicious code into pages or posts where the vulnerable shortcode is embedded.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.