CVE-2024-2142

Summary

CVE-2024-2142 is a stored Cross-Site Scripting (XSS) vulnerability affecting the Ultimate Addons for Beaver Builder – Lite plugin for WordPress. This issue, present in versions up to and including 1.5.7, allows authenticated attackers with contributor-level access or higher to inject malicious web scripts into the Info Table widget. As a result, the injected scripts will be executed whenever a user accesses an affected page, posing a significant security risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.