CVE-2024-51684
CVSS 3.1 Score 7.1 of 10 (high)
Details
Published Nov 14, 2024
Updated: Nov 15, 2024
CWE ID 352
Summary
CVE-2024-51684 is a newly identified vulnerability affecting the Ciprian Popescu W3P SEO plugin. This issue involves a Cross-Site Request Forgery (CSRF) weakness, which can lead to Stored XSS (Cross-Site Scripting) attacks. The vulnerability exists in versions of W3P SEO prior to 1.8.6. An attacker could exploit this flaw by crafting a malicious request that, when executed by an unsuspecting user, could inject malicious scripts into the affected site, potentially compromising it.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.