CVE-2024-8442

Summary

CVE-2024-8442 is a stored cross-site scripting (XSS) vulnerability affecting the Prime Slider – Addons For Elementor plugin for WordPress. This issue, which exists in the Blog widget, allows authenticated attackers with contributor-level access or higher to inject malicious scripts. The vulnerability stems from insufficient sanitization and output escaping of user-supplied attributes, enabling an attacker to execute arbitrary web scripts that will run whenever a user accesses an injected page. Versions up to and including 3.15.18 are susceptible to this issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.