CVE-2024-30424

Summary

CVE-2024-30424 is a Cross-Site Scripting (XSS) vulnerability affecting WPZOOM's Beaver Builder Addons. The flaw, which permits Stored XSS attacks, lies in the way user inputs are handled during the generation of web pages. Attackers can exploit this issue by injecting malicious scripts into the affected website, allowing them to steal user data or execute unwanted actions on behalf of the user. This vulnerability impacts Beaver Builder Addons versions 1.3.4 and older. Users are strongly advised to update to a patched version as soon as possible to mitigate the risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.