CVE-2024-44010

Summary

CVE-2024-44010 is a newly identified Cross-site Scripting (XSS) vulnerability affecting Catch Themes Full Frame. The flaw, classified as an Improper Neutralization of Input During Web Page Generation issue, permits attackers to inject and execute malicious scripts on users' browsers. This stored XSS vulnerability poses a significant risk as it can be exploited even after the user leaves the affected page, potentially leading to data theft or session hijacking. The vulnerability affects versions of Full Frame from n/a through 2.7.2. It is crucial for users to update their themes as soon as possible to mitigate the risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.