CVE-2024-32082

Summary

CVE-2024-32082 is a newly disclosed vulnerability affecting the kp4coder Sync Post With Other Site feature. This issue combines Cross-Site Request Forgery (CSRF) and Cross-Site Scripting (XSS) vulnerabilities, allowing unauthorized commands and malicious scripts to be executed on a user's browser when they visit a specially crafted website. Affected versions of Sync Post With Other Site span from undisclosed versions up to and including 1.5.1, and users are advised to upgrade to a patched version as soon as possible to mitigate the risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.