CVE-2024-27517
CVSS 3.1 Score 5.4 of 10 (medium)
Details
Published Feb 29, 2024
Updated: Dec 16, 2024
CWE ID 79
Summary
CVE-2024-27517 is a newly disclosed Cross-Site Scripting (XSS) vulnerability affecting Webasyst version 2.9.9. This weakness allows attackers to craft malicious blogs containing malicious code, which can be executed in the context of the victim's browser. Successful exploitation grants attackers the ability to steal sensitive data, launch further attacks, or manipulate the user interface. Users are advised to upgrade to the latest version of Webasyst as soon as possible to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.