Description:

CVE-2024-5427 is a Stored Cross-Site Scripting (XSS) vulnerability in the WPCafe plugin for WordPress. It allows authenticated attackers with contributor-level access or higher to inject malicious scripts into pages, which can be executed when users visit those pages. The SVRS of 34 indicates a moderate risk, but it's important to note that the CVSS score of 6.4 suggests a medium severity.

Key Insights:

• Exploit Status: Active exploits have been published.
• Threat Actors/APT Groups: No specific threat actors or groups have been identified as actively exploiting this vulnerability.
• CISA Warnings: The Cybersecurity and Infrastructure Security Agency (CISA) has not issued a warning for this vulnerability.
• In the Wild: There is no evidence that this vulnerability is being actively exploited in the wild.

Mitigation Strategies:

• Update the WPCafe plugin to version 2.2.25 or later.
• Restrict access to the plugin's Reservation Form shortcode to only trusted users.
• Implement input validation and output escaping mechanisms to prevent malicious scripts from being injected.
• Regularly scan your website for vulnerabilities and patch any that are found.

Additional Information:

If you have any further questions regarding this incident, you can use the 'Ask to Analyst' feature, contact SOCRadar directly, or open a support ticket for more information.