CVE-2024-51940
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Summary
CVE-2024-51940 is a Cross-site Scripting (XSS) vulnerability affecting WP Responsive Video, a plugin used for creating responsive videos in WordPress websites. The flaw, specifically a DOM-Based XSS issue, enables attackers to inject malicious scripts into a victim's web browser, gaining unauthorized control over their session. This vulnerability can potentially lead to data theft, account takeover, and other forms of cyberattacks. Affected versions of WP Responsive Video range from not available to 1.0. Upgrading to the latest version or disabling the plugin is highly recommended to mitigate the risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.