CVE-2024-47336

Summary

CVE-2024-47336 is a stored Cross-site Scripting (XSS) vulnerability affecting the Terms descriptions component from version n/a through 3.4.6. An attacker can exploit this improper neutralization of input during web page generation issue to inject malicious scripts into the Terms descriptions. Successful exploitation results in the execution of the attacker's scripts in the context of the affected website, potentially leading to unauthorized access, information disclosure, or other malicious actions. Users are advised to update to a patched version as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.