CVE-2024-12683
CVSS 3.1 Score 3.5 of 10 (low)
Details
Published Mar 26, 2025
Updated: Mar 27, 2025
Summary
CVE-2024-12683 is a vulnerability affecting the Smart Maintenance Mode plugin for WordPress before version 1.5.2. This issue arises due to insufficient sanitization and escaping of certain settings. As a result, high privilege users, including administrators, can execute Stored Cross-Site Scripting (XSS) attacks, even when the unfiltered_html capability is restricted, posing a significant security risk in multisite environments.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.