CVE-2024-12841
CVSS 3.1 Score 6.1 of 10 (medium)
Details
Published Dec 20, 2024
Updated: Jan 7, 2025
CWE ID 94
CWE ID 79
Summary
CVE-2024-12841 is a newly disclosed vulnerability affecting Emlog Pro versions up to 2.4.1. This issue, located in the /admin/tag.php file, is classified as problematic and enables remote cross-site scripting attacks. The manipulation of the argument keyword is the root cause, allowing attackers to inject malicious code into unsuspecting users' browsers. The exploit for this vulnerability has already been disclosed to the public, increasing the risk of widespread exploitation.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Emlog
Affected Vendors
- EM Log