CVE-2024-51682

Summary

CVE-2024-51682 is a Cross-site Scripting (XSS) vulnerability affecting HasThemes HT Builder, a WordPress Theme Builder for Elementor. The flaw, specifically an Improper Neutralization of Input During Web Page Generation issue, enables attackers to inject malicious scripts into websites using this theme. These scripts can be stored and executed whenever the vulnerable page is accessed, leading to potential data theft or unauthorized actions on behalf of the attacker. Versions of HT Builder from n/a to 1.3.0 are reportedly impacted.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.