CVE-2024-8799
CVSS 3.1 Score 6.1 of 10 (medium)
Details
Summary
CVE-2024-8799 identifies a vulnerability in the Custom Banners plugin for WordPress, affecting all versions up to and including 3.3. The vulnerability arises from improper escaping of URLs using the add_query_arg function, allowing unauthenticated attackers to execute arbitrary scripts on affected pages if users are tricked into clicking malicious links. To remediate this issue, users should update the plugin to a patched version that addresses this security flaw. The potential danger includes medium severity risks with low impacts on confidentiality and integrity, requiring user interaction for exploitation. The vulnerability has an exploitability score of 2.8 and is classified under CWE-79, indicating a Cross-site Scripting (XSS) risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions