CVE-2024-13569

CVE-2024-13569 is a Reflected Cross-Site Scripting (XSS) vulnerability affecting the Front End Users WordPress plugin up to version 3.2.32. This flaw allows an attacker to inject malicious scripts into a web page due to unsanitized input, which could then be executed in the browser of high-privilege users, such as administrators. With a CVSS score of 7.1 (High), the vulnerability is easily exploitable over the network with low attack complexity, potentially leading to compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation or Metasploit modules, Nuclei templates exist for detection, and there is minimal community discussion or media coverage surrounding this CVE.