CVE-2024-25597
CVSS 3.1 Score 7.1 of 10 (high)
Details
Published Mar 15, 2024
CWE ID 79
Summary
CVE-2024-25597 is a Cross-site Scripting (XSS) vulnerability affecting Etoile Web Design Ultimate Reviews from versions n/a through 3.2.8. Malicious users can exploit this improper input neutralization during web page generation to inject and execute malicious scripts in a victim's browser. The result could lead to information disclosure or unauthorized actions on behalf of the user. This issue poses a significant security risk and requires immediate attention and patching.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share