CVE-2024-53776

Summary

CVE-2024-53776 is a Cross-Site Request Forgery (CSRF) vulnerability discovered in Raphael Heide's Donate Me plugin. This issue allows an attacker to execute Stored XSS (Cross-Site Scripting) attacks on unsuspecting users. The CSRF weakness lies within Donate Me and affects all versions from n/a through 1.2.5. This flaw can lead to malicious scripts being injected into a user's session, potentially stealing sensitive information or performing unintended actions on behalf of the user.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.