CVE-2024-13116

Summary

CVE-2024-13116 is a vulnerability affecting the Crelly Slider WordPress plugin before version 1.4.7. Despite the disallowing of the unfiltered_html capability in multisite setups, this issue fails to sanitize and escape certain settings. Consequently, high privilege users, including administrators, can execute Stored Cross-Site Scripting attacks. This flaw poses a significant security risk, enabling attackers to inject malicious code into a WordPress site, potentially leading to data theft, unauthorized access, or site defacement.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.