Reflected Cross-Site Scripting Vulnerability in WP Extended Plugin

CVE-2024-8119

Summary

The WP Extended plugin for WordPress is susceptible to a reflected cross-site scripting vulnerability that arises from inadequate input sanitization and output escaping processes. This flaw allows unauthenticated attackers to exploit the vulnerability by injecting arbitrary web scripts through the page parameter. If users are tricked into interacting, such as clicking on a malicious link, the scripts can execute in their browsers. This can lead to session hijacking, data theft, or other malicious activities that compromise user security.

References