CVE-2024-42699

Summary

CVE-2024-42699 is a newly disclosed Cross-Site Scripting (XSS) vulnerability. This issue impacts the Create/Modify article function within Alkacon OpenCMS 17.0. An attacker can exploit this flaw by injecting malicious JavaScript code into the image title sub-field of an image. Successful exploitation could result in unintended execution of the attacker's script within the victim's web browser, potentially leading to session hijacking, data theft, or other malicious activities. Users of Alkacon OpenCMS 17.0 are advised to apply the necessary patches or updates as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.