CVE-2024-51610
CVSS 3.1 Score 5.4 of 10 (medium)
Details
Summary
CVE-2024-51610 is a Cross-Site Scripting (XSS) vulnerability affecting SEO Themes Display Terms Shortcode. The flaw, which allows Stored XSS attacks, resides in the way the shortcode handles user-supplied input during web page generation. Attackers can exploit this vulnerability to inject malicious scripts into web pages viewed by other users, potentially leading to data theft or unauthorized access. The affected versions of the Display Terms Shortcode span from n/a to 1.0.4. It is crucial that users update their plugins to a patched version to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.