CVE-2024-52389
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Summary
CVE-2024-52389 is a newly discovered Cross-site Scripting (XSS) vulnerability affecting WP Job Portal. The flaw, which allows for Stored XSS attacks, occurs during the web page generation process in WP Job Portal versions from n/a to 2.2.0. An attacker can inject malicious scripts into a vulnerable website that remains active until the page is reloaded, potentially stealing user data or taking control of user sessions. This vulnerability poses a significant risk, as XSS attacks can lead to serious consequences, such as data theft and unauthorized account access. It is highly recommended that WP Job Portal users upgrade to the latest version to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.