CVE-2024-51895

Summary

CVE-2024-51895 is a Cross-site Scripting (XSS) vulnerability affecting the Minical Hotel Booking Plugin. The issue, which involves improper neutralization of user input during web page generation, allows for stored XSS attacks. This means an attacker can inject malicious scripts into a web page viewed by other users, potentially leading to data theft or unauthorized actions. The vulnerability exists in versions of the plugin from n/a through 1.0.2. Users are advised to update the plugin to the latest version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.