CVE-2024-51610

CVSS 3.1 Score 5.4 of 10 (medium)

Details

Published Nov 9, 2024
Updated: Nov 15, 2024
CWE ID 79

Summary

CVE-2024-51610 is a Cross-Site Scripting (XSS) vulnerability affecting SEO Themes Display Terms Shortcode. The flaw, which allows Stored XSS attacks, resides in the way the shortcode handles user-supplied input during web page generation. Attackers can exploit this vulnerability to inject malicious scripts into web pages viewed by other users, potentially leading to data theft or unauthorized access. The affected versions of the Display Terms Shortcode span from n/a to 1.0.4. It is crucial that users update their plugins to a patched version to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share