Description:

CVE-2024-0609 is a Stored Cross-Site Scripting (XSS) vulnerability in the WP ERP plugin for WordPress. It allows unauthenticated attackers to inject malicious scripts into pages, which can execute when users access those pages. This could lead to account takeover, data theft, or other malicious activities.

Key Insights:

• SVRS Score: 42 (Moderate)
• Exploit Status: Active exploits have been published.
• CISA Warnings: The Cybersecurity and Infrastructure Security Agency (CISA) has warned of the vulnerability, calling for immediate and necessary measures.
• In the Wild: The vulnerability is actively exploited by hackers.

Mitigation Strategies:

• Update the WP ERP plugin to version 1.12.10 or later.
• Implement input validation and output escaping to prevent malicious scripts from being injected.
• Use a web application firewall (WAF) to block malicious requests.
• Regularly scan your website for vulnerabilities and patch any that are found.

Additional Information:

If users have additional queries regarding this incident, they can use the 'Ask to Analyst' feature, contact SOCRadar directly, or open a support ticket for more information if necessary.