CVE-2024-51801
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Published Nov 19, 2024
CWE ID 79
Summary
CVE-2024-51801 is a Cross-site Scripting (XSS) vulnerability affecting the Jake Brown Brand my Footer plugin. The issue lies in the improper neutralization of user input during web page generation. This vulnerability enables an attacker to inject malicious scripts into a web page, potentially stealing user data or gaining unauthorized access. The affected versions of the plugin range from n/a to 1.1. Users are strongly advised to update to the latest version or consider alternative solutions to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.