CVE-2024-50430
CVSS 3.1 Score 5.9 of 10 (medium)
Details
Summary
CVE-2024-50430 is a Cross-site Scripting (XSS) vulnerability affecting The Beaver Builder Team's Beaver Builder plugin. This issue, classified as Improper Neutralization of Input During Web Page Generation, enables attackers to inject malicious scripts into web pages generated by the plugin. The vulnerability can be exploited to steal user data or take control of user sessions, posing a significant security risk. The issue affects Beaver Builder versions from n/a through 2.8.3.7. Users are advised to upgrade to the latest patched version as soon as possible to mitigate this threat.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.