CVE-2024-30424

Summary

CVE-2024-30424 is a Cross-Site Scripting (XSS) vulnerability affecting WPZOOM's Beaver Builder Addons. The flaw, located in the plugin's web page generation process, allows attackers to inject malicious scripts into pages viewed by other users. These scripts can steal sensitive information or manipulate user actions, posing a serious security risk. Versions of Beaver Builder Addons from n/a through 1.3.4 are reportedly affected. Users are advised to update to the latest patch as soon as possible to mitigate this issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.