CVE-2022-20766

Summary

CVE-2024-48068 is a recently disclosed cross-site scripting (XSS) vulnerability affecting Shenzhen Landray Software Co.,LTD's Landray EKP version 16 and earlier. This issue enables attackers to inject and execute arbitrary web scripts or HTML code on victims' browsers, potentially leading to data theft or unauthorized system access. The vulnerability arises due to insufficient input validation in the affected software. Users are strongly advised to upgrade to the latest version to mitigate this risk. Failure to do so may result in significant security consequences.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.