CVE-2024-0509
CVSS 3.1 Score 6.1 of 10 (medium)
Details
Summary
CVE-2024-0509 is a Reflected Cross-Site Scripting (XSS) vulnerability affecting the WP 404 Auto Redirect to Similar Post plugin for WordPress. Versions up to and including 1.0.3 are vulnerable to this issue. The vulnerability arises due to insufficient input sanitization and output escaping, enabling unauthenticated attackers to inject arbitrary web scripts. Attackers can exploit this flaw by tricking users into clicking on malicious links, resulting in the injection of malicious code on the affected pages. Successful exploitations could lead to various attacks, including session hijacking or data theft. It is strongly recommended that users update the plugin to the latest version to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- Howaldtswerke
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions