CVE-2024-47306

Summary

CVE-2024-47306 is a Cross-site Scripting (XSS) vulnerability affecting Secure Copy Content Protection and Content Locking versions 4.2.3 and below. The flaw lies in the improper neutralization of user input during web page generation. An attacker can exploit this vulnerability by injecting malicious scripts into a targeted website, which could result in stolen user data or unintended website functionality for unsuspecting visitors. This stored XSS issue poses a significant risk to users and requires immediate attention and patching from the affected software vendor.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.