Unauthorized Injection of Arbitrary Web Scripts Through Reflected Cross-Site Scripting in Pixel Cat Conversion Pixel Manager

CVE-2024-8544

What is CVE-2024-8544?

The Pixel Cat – Conversion Pixel Manager plugin for WordPress has a vulnerability that allows unauthenticated attackers to exploit reflected cross-site scripting. This vulnerability arises from the use of the add_query_arg function without proper URL escaping, making it possible for attackers to inject malicious web scripts into webpages. If a user is deceived into clicking on a crafted link, the injected script can execute within their browser context, potentially leading to further security breaches and data compromise.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References