CVE-2024-24291

Summary

CVE-2024-24291 is a vulnerability affecting the /member/index/login component of yzmcms v7.0. This issue enables attackers to manipulate URLs, directing unsuspecting users to malicious websites. Upon visiting these sites, users may unintentionally divulge sensitive information or download malware, potentially compromising their security. Attackers can exploit this flaw to conduct phishing attacks and redirect traffic to malicious domains. Users running this outdated version of yzmcms are advised to update as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.