CVE-2024-53722

Summary

CVE-2024-53722 is a newly disclosed vulnerability that affects the Rockemmusic Favicon My Blog plugin. The issue combines Cross-Site Request Forgery (CSRF) and Stored XSS (Cross-Site Scripting) vulnerabilities, allowing malicious actors to inject malicious scripts into a user's web session. An attacker can exploit this vulnerability by tricking a user into clicking a specially crafted link. Successful exploitation could lead to the theft of sensitive information or the takeover of the affected user's account. This vulnerability affects Favicon My Blog versions from n/a through 1.0.2. Users are strongly advised to update to the latest version or consider disabling the plugin until a patch is available.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.