CVE-2024-13517

Summary

CVE-2024-13517 is a stored Cross-Site Scripting (XSS) vulnerability affecting the Easy Digital Downloads plugin for WordPress, versions up to and including 3.3.2. Malicious scripts can be injected into the Title value, exploited by authenticated attackers with administrator-level access. This vulnerability potentially allows the execution of arbitrary web scripts on pages visited by users, posing a significant security risk. The threat is limited to multi-site installations and installations where the unfiltered_html option has been disabled.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.