CVE-2024-8282

Summary

CVE-2024-8282 is a Stored Cross-Site Scripting (XSS) vulnerability affecting the Ibtana plugin for WordPress. The issue lies within the 'wp:ive/ive-productscarousel' Gutenberg block, where the 'align' attribute is insufficiently sanitized and escaped. This defect allows authenticated attackers, with Contributor-level access and above, to inject malicious web scripts into pages. When a user accesses an injected page, the scripts are executed, potentially leading to unintended actions or data exposure. Versions of the plugin up to and including 1.2.4.4 are affected.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.