CVE-2024-52347

Summary

CVE-2024-52347 is a Cross-site Scripting (XSS) vulnerability affecting the Website remote Install plugin on Gravity, WPForms, Formidable, Ninja, and Caldera platforms. Malicious scripts can be stored and executed on affected websites, potentially leading to unauthorized access or data theft when visitors interact with affected pages. The vulnerability exists in versions from n/a through 4.0, so it is essential for site owners using these plugins to update immediately to protect their websites.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.