Reflected Cross-Site Scripting Vulnerability Affects All Versions of Waymark WordPress Plugin

CVE-2024-12325

Summary

A security vulnerability exists in the Waymark plugin for WordPress that permits reflected Cross-Site Scripting (XSS) due to inadequate input validation and output sanitization. This flaw allows attackers to inject malicious web scripts via the 'content' parameter. If successfully exploited, this vulnerability can enable unauthenticated threat actors to execute arbitrary scripts in the user's browser. The impact of this vulnerability is heightened when a user is deceived into interacting with a compromised link, potentially leading to data theft or unauthorized access.

References