Reflected Cross-Site Scripting Vulnerability in GDY Modular Content Plugin by WordPress

CVE-2024-12153

What is CVE-2024-12153?

The GDY Modular Content plugin for WordPress is susceptible to reflected cross-site scripting due to inadequate escaping of URLs used with the add_query_arg function. This vulnerability affects all versions up to and including 0.9.91. Unauthenticated attackers can exploit this flaw to inject arbitrary web scripts into a page. If a user is deceived into performing specific actions, such as clicking on a malicious link, these scripts can be executed within the context of the user’s session, potentially leading to unauthorized actions or data theft.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References