CVE-2024-9269

Summary

CVE-2024-9269 details a vulnerability in the Relogo plugin for WordPress, affecting all versions up to and including 0.4.2, which is susceptible to Stored Cross-Site Scripting via SVG file uploads due to inadequate input sanitization and output escaping. This flaw allows authenticated users with Author-level access and higher to inject malicious scripts into web pages that execute when users access the SVG files. Organizations using this plugin may face potential security risks, including unauthorized script execution that could compromise user data or site integrity. To remediate the issue, it is recommended that users update the Relogo plugin to the latest version where this vulnerability is addressed. The CVSS score for this vulnerability is 6.4, indicating a medium severity level with low privileges required for exploitation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.