Reflected Cross-Site Scripting Vulnerability in WP Extended Plugin

CVE-2024-8119

What is CVE-2024-8119?

The WP Extended plugin for WordPress is susceptible to a reflected cross-site scripting vulnerability that arises from inadequate input sanitization and output escaping processes. This flaw allows unauthenticated attackers to exploit the vulnerability by injecting arbitrary web scripts through the page parameter. If users are tricked into interacting, such as clicking on a malicious link, the scripts can execute in their browsers. This can lead to session hijacking, data theft, or other malicious activities that compromise user security.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References