CVE-2024-9830

Summary

CVE-2024-9830 is a Reflected Cross-Site Scripting vulnerability affecting the Bard theme for WordPress. The flaw, present in all versions up to 2.216, stems from the use of add_query_arg without proper escaping in URLs. As a result, unauthenticated attackers can inject arbitrary web scripts into pages, potentially leading to unintended actions if a user is tricked into clicking a malicious link.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.