CVE-2024-54274

Summary

CVE-2024-54274 is a Cross-Site Scripting (XSS) vulnerability affecting the WordPress HelpDesk & Support Ticket System Plugin – Octrace Support. The issue, which allows Reflected XSS, can be exploited by attackers to inject malicious scripts into a webpage viewed by other users. This can lead to unauthorized data access or theft of user credentials. The vulnerability affects versions of the plugin from n/a through 1.2.7, and users are urged to update to a patched version as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.