CVE-2023-49771

CVSS 3.1 Score 6.1 of 10 (medium)

Details

Published Dec 14, 2023
Updated: Dec 18, 2023
CWE ID 79

Summary

CVE-2023-49771 is a Cross-site Scripting (XSS) vulnerability affecting the Peter Raschendorfer Smart External Link Click Monitor [Link Log] software. The flaw, located in the web page generation process, enables attackers to inject malicious scripts into the application, potentially stealing user data or taking control of their sessions. Affected versions of the software range from n/a to 5.0.2, and users are advised to apply the necessary patches to mitigate the risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share