CVE-2024-0981

Okta Browser Plugin versions 6.5.0 through 6.31.0 (Chrome/Edge/Firefox/Safari) are vulnerable to cross-site scripting. This issue occurs when the plugin prompts the user to save these credentials within Okta Personal. A fix was implemented to properly escape these fields, addressing the vulnerability. Importantly, if Okta Personal is not added to the plugin to enable multi-account view, the Workforce Identity Cloud plugin is not affected by this issue. The vulnerability is fixed in Okta Browser Plugin version 6.32.0 for Chrome/Edge/Safari/Firefox.

• CWE-79

• https://trust.okta.com/security-advisories/okta-browser-plugin-reflected-cross-site-scripting-cve-2024-0981
• https://trust.okta.com/security-advisories/okta-browser-plugin-reflected-cross-site-scripting-cve-2024-0981

Published

Jul 23, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-0975The WordPress Access Control plugin for WordPress is vulnera…5.3
• CVE-2024-0976The WP Event Manager – Events Calendar, Registrations, Sell …6.1
• CVE-2024-0977The Timeline Widget For Elementor (Elementor Timeline, Verti…5.4
• CVE-2024-0978The My Private Site plugin for WordPress is vulnerable to Se…5.3
• CVE-2024-0979The Dashboard Widgets Suite plugin for WordPress is vulnerab…6.1
• CVE-2024-0980The Auto-update service for Okta Verify for Windows is vulne…7.1
• CVE-2024-0983The ImageRecycle pdf & image compression plugin for WordPres…4.3
• CVE-2024-0984The ImageRecycle pdf & image compression plugin for WordPres…4.3
• CVE-2024-0985Late privilege drop in REFRESH MATERIALIZED VIEW CONCURRENTL…8
• CVE-2024-0986A vulnerability was found in Issabel PBX 4.0.0. It has been …9.8
• CVE-2024-0987A vulnerability classified as critical has been found in Sic…9.8
• CVE-2024-0988A vulnerability classified as critical was found in Sichuan …9.8