Unsecured Reflected Cross-Site Scripting in Ebook Store Plugin for WordPress

CVE-2024-11287

What is CVE-2024-11287?

CVE-2024-11287 refers to a vulnerability found in the Ebook Store plugin for WordPress. This flaw allows for Reflected Cross-Site Scripting (XSS) attacks due to improper handling of user inputs via the add_query_arg function. Attackers can exploit this vulnerability by tricking users into clicking on malicious links that can execute arbitrary scripts in their browsers. This poses significant risks as it can lead to unauthorized actions, data theft, and website compromises. All versions of the Ebook Store plugin up to and including 5.8001 are affected, making immediate patching and security measures essential.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References