CVE-2024-51707

Summary

CVE-2024-51707 is a newly discovered Cross-Site Scripting (XSS) vulnerability affecting WP Visual Adverts. The flaw, which allows reflected XSS attacks, stems from the improper neutralization of user input during web page generation. This issue impacts WP Visual Adverts versions from n/a through 2.3.0. Attackers can exploit this vulnerability to inject malicious scripts into a targeted user's web browser, potentially leading to data theft or unauthorized access. Users are advised to update their WP Visual Adverts plugin as soon as possible to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.