CVE-2024-53748

Summary

CVE-2024-53748 is a Cross-site Scripting (XSS) vulnerability affecting WP Mermaid, an library used for creating diagrams and flowcharts in WordPress websites. The issue allows an attacker to inject malicious scripts into a webpage, which can be stored and executed on unsuspecting users' browsers even after they leave the affected page. The flaw exists in WP Mermaid versions from n/a through 1.0.2, making all users running these versions potentially vulnerable to XSS attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.