CVE-2024-47320
CVSS 3.1 Score 7.1 of 10 (high)
Details
Published Oct 6, 2024
Updated: Oct 7, 2024
CWE ID 79
Summary
CVE-2024-47320 is a newly disclosed Cross-Site Scripting (XSS) vulnerability affecting the WS Form LITE plugin used in WordPress sites. The flaw, located in the plugin's web page generation process, enables an attacker to inject malicious scripts into a website, potentially stealing user data or taking control of user sessions. This issue impacts WS Form LITE versions from n/a to 1.9.238. It is crucial for WordPress users running this plugin to update to the latest patched version as soon as possible to prevent potential attacks.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.