CVE-2024-51807
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Summary
CVE-2024-51807 is a Cross-site Scripting (XSS) vulnerability affecting AgendaPress, a WordPress plugin used for publishing meeting agendas and programs. The issue allows an attacker to inject malicious scripts into web pages generated by the plugin, potentially stealing user data or taking control of user sessions. This vulnerability, which impacts versions of AgendaPress from n/a through 1.0.8, could be exploited by attackers to launch targeted attacks on unsuspecting users. It is essential that users upgrade their plugins to the latest, secure version to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.