CVE-2024-13633

Summary

CVE-2024-13633 is a Reflected Cross-Site Scripting vulnerability affecting the Simple Catalogue plugin for WordPress. The issue stems from the failure to sanitize and escape user input before rendering it on the page. Malicious scripts injected through this vulnerability can be executed in the context of the affected user, posing a significant risk for high-privilege users like administrators. Successful exploitation could lead to unauthorized access, data theft, or the installation of malware. Users are advised to update the Simple Catalogue plugin to the latest version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.