CVE-2024-8726

Summary

CVE-2024-8726 is a Reflected Cross-Site Scripting (XSS) vulnerability affecting the MailChimp Forms by MailMunch plugin for WordPress. Versions up to and including 3.2.3 are impacted by this issue. The vulnerability arises due to the use of add_query_arg without proper escaping in plugin URLs. An attacker can exploit this flaw by injecting arbitrary web scripts, which can be executed if a user is tricked into performing a specific action, such as clicking on a malicious link. This vulnerability poses a significant risk, as it allows unauthenticated attackers to compromise user sessions and steal sensitive data. It is strongly recommended that users update to the latest version of the plugin or disable it until a fix is available.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.