CVE-2024-9595
CVSS 3.1 Score 6.4 of 10 (medium)
Details
Published Oct 12, 2024
Updated: Oct 15, 2024
CWE ID 79
Summary
CVE-2024-9595 is a critical vulnerability affecting the TablePress plugin for WordPress, versions up to and including 2.4.2. This issue allows authenticated attackers with Author-level access or higher to inject malicious scripts into table cell content. The lack of proper input sanitization and output escaping enables the execution of these scripts whenever an injected page is accessed, posing a significant risk to websites using this plugin.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.