CVE-2024-46209

Summary

CVE-2024-46209 is a stored cross-site scripting (XSS) vulnerability affecting REDAXO CMS version 5.17.1. The issue lies in the component /media/test.html where an attacker can inject a malicious payload into the password parameter. Successful exploitation grants the attacker the ability to execute arbitrary web scripts or HTML code on the targeted user's browser, potentially leading to unauthorized access or data theft. This vulnerability poses a significant risk and requires immediate attention and patching from REDAXO CMS users.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.