CVE-2024-13493

Summary

CVE-2024-13493 is a vulnerability affecting the Sensly Online Presence WordPress plugin up to version 0.6. This issue permits high privilege users, including admins, to execute Stored Cross-Site Scripting (XSS) attacks, despite the unfiltered_html capability being disallowed, particularly in multisite setups. The plugin fails to properly sanitize and escape certain settings, creating a security loophole for malicious code injection. Successful exploitation can lead to unauthorized access, data theft, or website defacement. Users are strongly advised to update the plugin to a secure version as soon as possible.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.