CVE-2024-47370

CVSS 3.1 Score 6.5 of 10 (medium)

Details

Published Oct 5, 2024
Updated: Oct 7, 2024
CWE ID 79

Summary

CVE-2024-47370 is a Cross-site Scripting (XSS) vulnerability affecting the Author Avatars List/Block in versions 2.1.21 and below. An attacker can exploit this vulnerability by neutralizing input improperly during web page generation. Successful exploitation results in stored XSS, which allows an attacker to inject malicious scripts into a web page viewed by other users. The impact includes potential data theft, account takeover, and site defacement. Users are advised to upgrade to a patched version as soon as possible to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share