CVE-2024-51678

Summary

CVE-2024-51678 is an XSS (Cross-Site Scripting) vulnerability affecting the Marcel Pol Elo Rating Shortcode. The shortcode, used in versions from n/a through 1.0.3, contains an improper neutralization of input issue. Malicious scripts can be stored and executed within web pages generated by the shortcode, posing a significant security risk to users. This weakness allows attackers to inject malicious code into web pages viewed by other users, potentially stealing sensitive information or taking control of their sessions.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.