CVE-2024-13223

Summary

CVE-2024-13223 is a Reflected Cross-Site Scripting vulnerability affecting the Tabulate WordPress plugin through version 2.10.3. This issue arises due to the plugin's failure to sanitize and escape certain parameters before rendering them on the page. Malicious scripts injected through these vulnerable parameters can be executed in the context of the page viewer, posing a significant threat to high-privilege users like administrators. Successful exploitation could lead to unauthorized access, data theft, or site takeover. Users are advised to update to the latest version of the Tabulate plugin as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.