CVE-2024-8726

Summary

CVE-2024-8726 is a Reflected Cross-Site Scripting (XSS) vulnerability affecting the MailChimp Forms by MailMunch plugin for WordPress. Versions up to and including 3.2.3 are impacted by this issue. The flaw lies in the plugin's use of add_query_arg without proper escaping, allowing attackers to inject malicious scripts into URLs. This vulnerability enables unauthenticated attackers to execute arbitrary web scripts on pages, potentially tricking users into clicking malicious links and executing the code.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.