CVE-2024-0239

Summary

CVE-2024-0239 is a Reflected Cross-Site Scripting (XSS) vulnerability affecting the Contact Form 7 Connector plugin before version 1.2.3 in WordPress. This issue allows an attacker to inject malicious scripts into a webpage, which could then be executed by an administrator's browser when viewing a crafted message in the contact form. The vulnerability arises due to the plugin's failure to sanitize and escape a specific parameter, making it an attractive target for potential attacks. To mitigate this risk, administrators must update the plugin to the latest version as soon as possible.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.