CVE-2024-13101

Summary

CVE-2024-13101 is a stored cross-site scripting (XSS) vulnerability affecting the WP MediaTagger plugin for WordPress. This issue, present in versions 4.1.1 and below, allows users with the contributor role and above to inject malicious scripts into a page or post by exploiting the lack of validation and escaping of shortcode attributes. An attacker could use this vulnerability to steal user information, modify content, or redirect visitors to malicious sites. WordPress users are advised to update to the latest plugin version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.