CVE-2024-13711
CVSS 3.1 Score 6.1 of 10 (medium)
Details
Summary
CVE-2024-13711 is a Reflected Cross-Site Scripting (XSS) vulnerability affecting the Pollin plugin for WordPress. Version 1.01.1 and below are impacted. Attackers can exploit this issue by injecting malicious scripts into the 'question' parameter. This vulnerability enables unauthenticated attackers to inject arbitrary code into pages, potentially tricking users into clicking malicious links and executing the scripts. Successful exploitation of this vulnerability can result in data theft or unauthorized system access. It is recommended that users update to the latest version of the Pollin plugin to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.