CVSS 3.1 Score 7.1 of 10 (high)


Published Mar 15, 2024


CVE-2024-25597 is a vulnerability categorized as CWE-79 (Improper Neutralization of Input During Web Page Generation) and has a risk score of 25. The vulnerability affects Ultimate Reviews, specifically versions from n/a through 3.2.8 in the Etoile Web Design software. It is classified as a Stored Cross-site Scripting (XSS) vulnerability, which allows attackers to inject malicious code into web pages. The base severity of this vulnerability is HIGH, with a base score of 7.1. No privileges are required for exploitation, but user interaction is required. The attack vector is through the network, and the impact on integrity and confidentiality is low. The availability impact is also low. Remediation measures have not been specified, and the danger it poses to an organization would depend on the nature of the web applications affected and the potential for exploitation by attackers.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2024-25597 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options