CVE-2024-47394

CVSS 3.1 Score 7.1 of 10 (high)

Details

Published Oct 5, 2024
Updated: Oct 7, 2024
CWE ID 79

Summary

CVE-2024-47394 is a newly identified Cross-site Scripting (XSS) vulnerability that affects the eyecix JobSearch application, from an unspecified version through 2.5.9. Malicious actors can exploit this weakness by injecting malicious scripts into the web page, potentially stealing user data or taking control of their sessions. This issue can lead to information disclosure or unauthorized actions, posing a significant risk to users interacting with the affected application. It is essential that users and administrators apply the necessary patches or updates to mitigate this vulnerability.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share