CVE-2024-4710
CVE-2024-4710: Stored Cross-Site Scripting (XSS) vulnerability in the UberMenu WordPress plugin. This flaw allows authenticated attackers with contributor-level access or higher to inject malicious web scripts into pages. These scripts execute whenever a user visits the compromised page, potentially leading to account takeover or data theft.
UberMenu plugin versions up to and including 3.8.2 are vulnerable due to insufficient input sanitization and output escaping in the ubermenu-col, ubermenu_mobile_close_button, ubermenu_toggle, ubermenu-search shortcodes. Though the CVSS score is 0, the SOCRadar Vulnerability Risk Score (SVRS) of 38 indicates a moderate risk and highlights the need for patching, despite not being immediately critical. The vulnerability allows for arbitrary code execution in a user's browser within the context of the affected website. This XSS vulnerability could allow attackers to escalate privileges or redirect users to phishing sites. Website administrators should update the UberMenu plugin to the latest version to mitigate this risk.
Description:
CVE-2024-4710 is a Stored Cross-Site Scripting (XSS) vulnerability in the UberMenu plugin for WordPress. It allows authenticated attackers with contributor-level access or higher to inject malicious scripts into pages, which will execute when users access those pages.
Key Insights:
- SVRS Score: 38 (Moderate)
- Exploit Status: Active exploits have been published.
- CISA Warnings: The Cybersecurity and Infrastructure Security Agency (CISA) has warned of the vulnerability, calling for immediate and necessary measures.
- In the Wild: The vulnerability is actively exploited by hackers.
Mitigation Strategies:
- Update the UberMenu plugin to version 3.8.3 or later.
- Implement input validation and output escaping mechanisms to prevent malicious scripts from being injected.
- Use a web application firewall (WAF) to block malicious requests.
- Regularly scan websites for vulnerabilities and patch any that are found.
Additional Information:
If users have additional queries regarding this incident, they can use the 'Ask to Analyst' feature, contact SOCRadar directly, or open a support ticket for more information if necessary.
Indicators of Compromise
Exploits
News
Social Media
Affected Software
References
CWE Details
CVE Radar
Real-time CVE Intelligence & Vulnerability Management Platform
CVE Radar provides comprehensive vulnerability intelligence by monitoring CVE databases, security advisories, and threat feeds. Get instant updates on new vulnerabilities, exploit details, and mitigation strategies specific to your assets.