CVE-2024-44022

Summary

CVE-2024-44022 is a newly disclosed Cross-Site Scripting (XSS) vulnerability that affects the Trustmary Review & testimonial widgets, with versions from n/a through 1.0.5. Hackers can exploit this Stored XSS flaw to inject malicious scripts into web pages generated by the widget, potentially stealing user data or gaining unauthorized access. The vulnerability arises from the improper neutralization of user input, posing a significant risk to websites utilizing these widgets. Users are advised to update to the latest version of the widget to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.