CVE-2024-8486
CVE-2024-8486: A Stored Cross-Site Scripting (XSS) vulnerability exists in the Shortcodes and extra features for Phlox theme plugin for WordPress. This flaw, present in versions up to 2.16.3, allows authenticated attackers with Contributor-level access or higher to inject malicious web scripts into pages through the ‘url’ parameter within the Modern Heading and Icon Picker widgets. Due to inadequate input sanitization and output escaping, these scripts will execute whenever a user visits the compromised page. While the SVRS score is 30, indicating a lower immediate criticality compared to scores above 80, the presence of "In The Wild" tag means the vulnerability is actively being exploited, increasing the risk significantly. This vulnerability could lead to user session hijacking, data theft, or defacement of the WordPress site. Prompt patching is recommended despite the moderate SVRS, considering the active exploitation.
Description:
CVE-2024-8486 is a Stored Cross-Site Scripting (XSS) vulnerability in the Shortcodes and extra features for Phlox theme plugin for WordPress. It allows authenticated attackers with Contributor-level access or higher to inject malicious scripts into pages, which will execute when users access those pages.
Key Insights:
- SVRS Score: 50 (Moderate)
- Exploit Status: Active exploits have been published.
- CISA Warning: The Cybersecurity and Infrastructure Security Agency (CISA) has warned of the vulnerability, calling for immediate and necessary measures.
- In the Wild: The vulnerability is actively exploited by hackers.
Mitigation Strategies:
- Update the Shortcodes and extra features for Phlox theme plugin to version 2.16.4 or later.
- Implement input validation and output escaping mechanisms to prevent malicious scripts from being injected.
- Use a web application firewall (WAF) to block malicious requests.
- Regularly scan websites for vulnerabilities and patch any that are found.
Additional Information:
If users have additional queries regarding this incident, they can use the 'Ask to Analyst' feature, contact SOCRadar directly, or open a support ticket for more information if necessary.
Indicators of Compromise
Exploits
News
Social Media
Affected Software
References
CWE Details
CVE Radar
Real-time CVE Intelligence & Vulnerability Management Platform
CVE Radar provides comprehensive vulnerability intelligence by monitoring CVE databases, security advisories, and threat feeds. Get instant updates on new vulnerabilities, exploit details, and mitigation strategies specific to your assets.