CVE-2024-13327

Summary

CVE-2024-13327 is a Reflected Cross-Site Scripting (XSS) vulnerability affecting the Musicbox WordPress plugin before version 2.0.4. The issue lies in the plugin's failure to sanitize and escape user input before rendering it on the page. Malicious actors can exploit this flaw to inject malicious scripts, potentially gaining unauthorized access to high-privilege user accounts, such as admin accounts. This vulnerability poses a significant security risk and requires users to update the plugin to the latest version as soon as possible.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.