CVE-2024-44036

Summary

CVE-2024-44036 is a newly identified Cross-site Scripting (XSS) vulnerability affecting the Kodex Posts likes feature from version n/a to 2.5.0. An attacker can exploit this issue to inject malicious scripts into a webpage viewed by other users, potentially stealing sensitive information or taking control of their accounts. This stored XSS vulnerability arises due to improper neutralization of user input during the web page generation process. Users are strongly advised to update their Kodex Posts installation as soon as a patch is available to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.