WHMpress vulnerable to Reflected XSS

CVE-2024-43246

What is CVE-2024-43246?

A reflected Cross-site Scripting (XSS) vulnerability exists in the WHMpress plugin developed by Creativeon. This flaw enables an attacker to inject malicious scripts into web pages generated by the affected product, leading to unauthorized actions executed on behalf of legitimate users. The vulnerability affects multiple versions of the WHMpress plugin, primarily versions from unspecified through 6.2-revision-5. This security issue emphasizes the importance of applying patches and updates to safeguard web applications from potential exploitation and compromise.

References