CVE-2024-13197

Summary

CVE-2024-13197 is a newly identified vulnerability affecting the donglight bookstore电商书城系统说明 1.0.0. This issue carries a problematic rating, and it pertains to the function updateUser within the file src/main/Java/org/zdd/bookstore/web/controller/admin/AdminUserControlle.java. The manipulation of this function results in cross-site scripting (XSS), which can be exploited remotely. The vulnerability details have been made public, potentially enabling malicious actors to take advantage of this exploit.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.