Reflected Cross-Site Scripting Vulnerability Affects All Versions of Waymark WordPress Plugin
CVE-2024-12325
What is CVE-2024-12325?
A security vulnerability exists in the Waymark plugin for WordPress that permits reflected Cross-Site Scripting (XSS) due to inadequate input validation and output sanitization. This flaw allows attackers to inject malicious web scripts via the 'content' parameter. If successfully exploited, this vulnerability can enable unauthenticated threat actors to execute arbitrary scripts in the user's browser. The impact of this vulnerability is heightened when a user is deceived into interacting with a compromised link, potentially leading to data theft or unauthorized access.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Waymark * <= 1.4.1
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved