CVE-2024-12001

Summary

CVE-2024-12001: A newly disclosed vulnerability affects the Wazifa System 1.0, specifically the Setting Handler component's /controllers/updatesettings.php file. This issue allows remote attackers to execute cross-site scripting (XSS) attacks by manipulating the firstname argument. This vulnerability has been made public, increasing the risk of exploitation. Further investigation suggests that other parameters may also be susceptible to this attack.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.