CVE-2024-54394

Summary

CVE-2024-54394 is a newly disclosed vulnerability that impacts the Mandrill WP Web solution. This issue combines Cross-Site Request Forgery (CSRF) and Stored Cross-Site Scripting (XSS) vulnerabilities. Exploitation of this CSRF flaw allows an attacker to craft malicious requests that can be executed on an affected user's behalf, potentially leading to XSS injection. Stored XSS vulnerabilities enable attackers to inject malicious scripts into web pages, which can then be executed whenever the page is viewed, posing a serious threat to users. The Mandrill WP plugin, used from an unknown version up to 1.0.5, is affected by this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.