CVE-2024-9269
CVSS 3.1 Score 6.4 of 10 (medium)
Details
Summary
CVE-2024-9269 details a vulnerability in the Relogo plugin for WordPress, affecting all versions up to and including 0.4.2, which is susceptible to Stored Cross-Site Scripting via SVG file uploads due to inadequate input sanitization and output escaping. This flaw allows authenticated users with Author-level access and higher to inject malicious scripts into web pages that execute when users access the SVG files. Organizations using this plugin may face potential security risks, including unauthorized script execution that could compromise user data or site integrity. To remediate the issue, it is recommended that users update the Relogo plugin to the latest version where this vulnerability is addressed. The CVSS score for this vulnerability is 6.4, indicating a medium severity level with low privileges required for exploitation.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions