CVE-2024-24834

Summary

CVE-2024-24834 is a Cross-site Scripting (XSS) vulnerability affecting the BEAR – Bulk Editor and Products Manager Professional plugin for WooCommerce by Pluginus.Net, from version n/a through 1.1.4. An attacker can inject malicious scripts into the plugin, which are then stored and executed whenever the affected page is accessed by other users. This can lead to unauthorized data access, manipulation, or theft, as well as the potential for further exploitation. Users are advised to update the plugin to the latest version as soon as possible to mitigate the risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.