CVE-2024-54287
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Summary
CVE-2024-54287 is a Cross-site Scripting (XSS) vulnerability affecting the Best Wp Developer Advanced Blog Post Block. The weakness lies in the improper neutralization of user input during web page generation. An attacker can exploit this issue to inject malicious scripts into the blog, potentially stealing user data or taking control of their sessions. The vulnerability exists in versions 1.0.1 through 1.0.4 of the Advanced Blog Post Block plugin. Users are advised to update to the latest version or consider alternative solutions to protect their websites from this threat.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.