CVE-2024-33976

Summary

CVE-2024-33976 is a Cross-Site Scripting (XSS) vulnerability identified in E-Negosyo System version 1.0. An attacker can take advantage of this issue by crafting a malicious JavaScript payload and sending it to an authenticated user via the 'id' parameter in the '/admin/user/index.php' page. Successful exploitation allows the attacker to partially control the victim's browser session, potentially leading to unauthorized access or data theft. This vulnerability poses a significant security risk and urges affected users to upgrade to the latest system version as soon as possible.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.