CVE-2024-8786
CVSS 3.1 Score 6.1 of 10 (medium)
Details
Published Oct 1, 2024
Updated: Oct 4, 2024
CWE ID 79
Summary
CVE-2024-8786 is a Reflected Cross-Site Scripting vulnerability in the Auto Featured Image from Title plugin for WordPress. The issue stems from the use of add_query_arg without proper escaping on URLs in all versions up to 2.3. This vulnerability enables unauthenticated attackers to inject arbitrary web scripts into pages. Successful exploitation of this vulnerability requires users to perform certain actions, like clicking on malicious links.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.