CVE-2024-51899

Summary

CVE-2024-51899 is a Cross-Site Scripting (XSS) vulnerability affecting SEO Themes' Simple Pricing Table. The issue resides in the plugin's web page generation process, where input neutralization is improperly handled. An attacker can exploit this flaw to inject malicious scripts, resulting in unintended execution of code in a user's browser. This vulnerability can lead to data theft, account takeover, and other potential security risks. The Simple Pricing Table plugin, from versions not listed, is the affected component.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.