CVE-2024-33977

Summary

CVE-2024-33977 is a Cross-Site Scripting (XSS) vulnerability identified in E-Negosyo System version 1.0. An attacker can exploit this issue by creating a malicious URL containing a 'view' parameter and sending it to a victim. Upon clicking the link, the victim's session cookie details can be obtained, potentially leading to unauthorized access to their account. This vulnerability poses a significant security risk and requires immediate attention and remediation from E-Negosyo System users and administrators.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.