CVE-2024-30430
CVSS 3.1 Score 5.9 of 10 (medium)
Details
Published Mar 29, 2024
Updated: Apr 1, 2024
CWE ID 79
Summary
CVE-2024-30430 is a Cross-site Scripting (XSS) vulnerability affecting Fluent CRM, a plugin used in WP Email Newsletter. The flaw, named "Improper Neutralization of Input During Web Page Generation," allows attackers to inject malicious scripts into Fluent CRM's stored content, potentially stealing user data or taking control of affected users' accounts. This issue impacts all versions of Fluent CRM from n/a through 2.8.44. Users are strongly urged to update to the latest, secure version as soon as possible to mitigate the risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share