CVE-2024-44041

CVSS 3.1 Score 5.9 of 10 (medium)

Details

Published Oct 6, 2024
Updated: Oct 7, 2024
CWE ID 79

Summary

CVE-2024-44041 is a newly disclosed Cross-Site Scripting (XSS) vulnerability affecting Martin Gibson IdeaPush. The flaw, which permits Stored XSS attacks, resides in the web page generation process of IdeaPush, putting versions from n/a to 8.66 at risk. Attackers can inject malicious scripts into affected web pages and potentially steal user data or perform unauthorized actions. Users are strongly advised to update to a patched version as soon as possible to mitigate the risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share