WordPress Ni CRM Lead plugin <= 1.3.0 - Reflected Cross Site Scripting (XSS) vulnerability

CVE-2024-54237

What is CVE-2024-54237?

A cross-site scripting (XSS) vulnerability exists in the Ni CRM Lead product by Anzia, specifically within versions from n/a to 1.3.0. This flaw results from improper validation of user input during web page generation, allowing malicious actors to execute arbitrary scripts in the context of a user's browser session. As a consequence, attackers could potentially manipulate web content, leading to unauthorized actions or data exfiltration. It is crucial for users of Ni CRM Lead to apply security measures to mitigate the risks associated with this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References