CVE-2024-8363

Summary

CVE-2024-8363 identifies a vulnerability in the Share This Image plugin for WordPress, affecting all versions up to and including 2.02. The vulnerability allows authenticated attackers with contributor-level access and above to execute stored cross-site scripting (XSS) attacks due to inadequate input sanitization and output escaping on user-supplied attributes within the plugin's STI Buttons shortcode. This can lead to the injection of arbitrary web scripts that may compromise the integrity of pages viewed by users. To remediate this issue, users are advised to update the plugin to the latest version that addresses this vulnerability. The potential danger includes unauthorized execution of scripts that can affect user data and site functionality, thus posing a medium severity risk to organizations utilizing this plugin.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.