CVSS 3.1 Score 6.4 of 10 (medium)


Published Feb 27, 2024


CVE-2024-1323 is a vulnerability affecting the Orbit Fox by ThemeIsle plugin for WordPress versions up to and including 2.10.30. The vulnerability is categorized as Stored Cross-Site Scripting and occurs due to insufficient input sanitization and output escaping on user supplied attributes, specifically the plugin's Post Type Grid Widget Title. This vulnerability allows authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts into pages. When a user accesses an injected page, the injected web scripts will execute, potentially leading to unauthorized access or malicious activities. Remediation for this vulnerability involves updating the plugin to the latest version, which includes necessary fixes to address the issue. The vulnerability has a base severity of MEDIUM with a base score of 6.4 according to CVSS:3.1 scoring system, indicating a moderate level of danger that organizations should be aware of and take appropriate measures to mitigate its potential impact.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2024-1323 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options