CVE-2024-51925
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Summary
CVE-2024-51925 is a Cross-site Scripting (XSS) vulnerability affecting the Testimonial Slider Shortcode, with versions from n/a to 1.1.9 being impacted. An attacker can exploit this issue by injecting malicious scripts during web page generation, resulting in stored XSS. The consequence is the execution of arbitrary code in users' browsers when they view a page containing the affected shortcode. This poses a significant risk, as an attacker can steal sensitive data or take control of user sessions. Therefore, it is essential to update the Testimonial Slider Shortcode to a patched version as soon as possible.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.