Unauthorized Script Injection Vulnerability in DPD Baltic Shipping Plugin for WordPress

CVE-2024-9350

What is CVE-2024-9350?

The DPD Baltic Shipping plugin for WordPress exhibits a vulnerability that allows for Reflected Cross-Site Scripting (XSS) due to inadequate input sanitization on the 'search_value' parameter. This flaw exists in all versions up to and including 1.2.83. Attackers could exploit this weakness by injecting malicious scripts into web pages, which may execute in a user's browser if the user is manipulated into clicking a crafted link. This vulnerability poses risks for user data and site integrity, necessitating prompt attention to plugin updates and security measures.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References