CVE-2024-54392

Summary

CVE-2024-54392 is a newly disclosed vulnerability affecting Midoks WP微信机器人. This issue involves a Cross-Site Request Forgery (CSRF) vulnerability that also includes Stored Cross-Site Scripting (XSS). attackers can exploit this flaw to inject malicious scripts into a victim's web browser, potentially leading to unauthorized actions or data theft. The affected version range includes WP微信机器人 from n/a to 5.3.5. Users are strongly advised to update to the latest patch to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.