CVE-2024-13706

Summary

CVE-2024-13706 is a Reflected Cross-Site Scripting (XSS) vulnerability affecting the WP Image Uploader plugin for WordPress. Versions up to and including 1.0.1 are impacted by this issue. Attackers can inject arbitrary web scripts into pages by exploiting insufficient input sanitization and output escaping in the 'file' parameter. This vulnerability enables unauthenticated attackers to trick users into performing actions, such as clicking on malicious links, leading to the execution of malicious scripts.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.