CVE-2024-13099

Summary

CVE-2024-13099: A vulnerability has been identified in the Widget4Call WordPress plugin before version 1.0.8. This issue allows an attacker to inject malicious scripts through a non-sanitized parameter, resulting in Reflected Cross-Site Scripting. High privilege users, including admins, are susceptible to this exploit. Users are advised to update to the latest version of the plugin to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.