CVE-2024-32528
CVSS 3.1 Score 7.1 of 10 (high)
Details
Summary
CVE-2024-32528 is a Cross-site Scripting (XSS) vulnerability affecting Seerox WP Dynamic Keywords Injector. This issue, which allows Reflected XSS attacks, occurs due to improper neutralization of user input during web page generation. The vulnerability impacts WP Dynamic Keywords Injector versions from n/a to 2.3.18. Successful exploitation could lead to the execution of malicious scripts in users' browsers, potentially stealing sensitive information or taking control of affected systems. Users are strongly advised to update their plugin to a secure version as soon as possible.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.