CVE-2024-51924

Summary

CVE-2024-51924 is a Cross-site Scripting (XSS) vulnerability affecting WP Agenda, a scheduling plugin for WordPress. The flaw, named "Improper Neutralization of Input During Web Page Generation," allows an attacker to inject malicious scripts into affected websites, posing a significant security risk to users. The vulnerability can be exploited even without user interaction, making it a stored XSS issue. WP Agenda versions from n/a through 2.0 are affected.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.