CVE-2024-13885
CVSS 3.1 Score 7.1 of 10 (high)
Details
Published Mar 13, 2025
Updated: Mar 14, 2025
Summary
CVE-2024-13885 is a Reflected Cross-Site Scripting (XSS) vulnerability affecting the WP e-Customers Beta WordPress plugin up to version 0.0.1. The issue stems from insufficient input validation, enabling attackers to inject malicious scripts into a webpage. This vulnerability poses a significant risk, particularly for high-privilege users, such as admins, who could be targeted for unauthorized access or data theft.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.