CVE-2024-54213

Summary

CVE-2024-54213 is a Cross-site Scripting (XSS) vulnerability affecting the WordPress Page Builder – Zion Builder, with versions from n/a to 3.6.12 being impacted. The flaw, referred to as Stored XSS, occurs when Zion Builder fails to neutralize user input during web page generation. An attacker can exploit this vulnerability by injecting malicious scripts into a webpage, which could lead to unauthorized access to user data or session hijacking when a user visits the malicious page. The vulnerability poses a significant security risk and requires immediate remediation by updating to a patched version of the software.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.