CVE-2024-10483

HighPublic PoC

Published: 26 February 2025

Published

26 February 2025

Modified

15 May 2025

KEV Added

—

Patch

—

CVSS Score v3.1 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

EPSS Score 0.0010 28.1th percentile

Risk Priority 14 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2024-10483 is a high-severity Cross-site Scripting (CWE-79) vulnerability in Simplepress Simplepress. Its CVSS base score is 7.1 (High).

Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked at the 28.1th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.

The strongest mitigations our analysis identified are NIST 800-53 SI-10 (Information Input Validation) and SI-15 (Information Output Filtering).

Deeper analysis

CVE-2024-10483 is a reflected cross-site scripting (XSS) vulnerability, classified under CWE-79, affecting the Simple:Press Forum WordPress plugin in versions before 6.10.11. The flaw arises because the plugin does not sanitize and escape a parameter before outputting it back in the page, enabling attackers to inject and execute arbitrary JavaScript code in the context of the affected page. The vulnerability received a CVSS v3.1 base score of 7.1 (AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L), indicating high severity due to its network accessibility and scope change despite requiring user interaction.

Unauthenticated attackers can exploit this vulnerability remotely with low attack complexity by tricking users into interacting with a maliciously crafted URL containing the XSS payload, such as through phishing links or social engineering. Upon execution in the victim's browser, the payload can lead to low-level impacts on confidentiality, integrity, and availability, potentially allowing theft of session cookies, user data, or limited page manipulation within the plugin's context.

The WPScan advisory recommends updating the Simple:Press Forum plugin to version 6.10.11 or later to mitigate the issue, as this release addresses the sanitization and escaping deficiency. Additional details are available at https://wpscan.com/vulnerability/c7e3c473-09b2-473b-87d7-0a01d8f52086/.

EU & UK References

🇪🇺 ENISA EUVD: EUVD-2025-5313

Vulnerability details

The Simple:Press Forum WordPress plugin before 6.10.11 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting.

CWE(s): CWE-79

Related Threats

MITRE ATT&CK Enterprise TechniquesAI

T1190 Exploit Public-Facing Application Initial Access

Adversaries may attempt to exploit a weakness in an Internet-facing host or system to initially access a network.

attack.mitre.org →

T1566.002 Spearphishing Link Initial Access

Adversaries may send spearphishing emails with a malicious link in an attempt to gain access to victim systems.

attack.mitre.org →

Why these techniques?

Reflected XSS in public-facing WordPress plugin directly enables remote exploitation of internet-facing software (T1190) and is delivered via malicious links typically distributed through spearphishing (T1566.002).

Confidence: HIGH · MITRE ATT&CK Enterprise v18.1