CVE-2024-51576

Summary

CVE-2024-51576 is a Cross-Site Scripting (XSS) vulnerability affecting the WPZA AMP Img Shortcode. The flaw, which allows Stored XSS attacks, is located within the plugin's web page generation process. This issue affects versions of the AMP Img Shortcode from n/a through 1.0.1. Attackers can exploit this vulnerability to inject malicious scripts into unsuspecting users' browsers, potentially leading to data theft or website defacement. Users are advised to update to the latest version of the plugin or consider disabling the affected shortcode until a patch is released.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.