CVE-2024-47372

Summary

CVE-2024-47372 is a newly disclosed Cross-Site Scripting (XSS) vulnerability affecting ThemeNcode LLC's TNC PDF viewer. The flaw stems from an improper neutralization of user input during web page generation. Attackers can exploit this vulnerability to inject malicious scripts into web pages viewed by the TNC PDF viewer, allowing them to execute arbitrary code in users' browsers. This issue affects versions of the TNC PDF viewer from n/a through 3.1.0. It is crucial that users and organizations apply the necessary patches to mitigate this risk promptly.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.