CVE-2024-47633

Summary

CVE-2024-47633 is a newly identified vulnerability affecting Zoho Forms. This issue involves an improper neutralization of user input during web page generation, leading to a Stored Cross-Site Scripting (XSS) vulnerability. The weakness resides in Zoho Forms versions 4.0 and below, putting potentially millions of users at risk. Cybercriminals could exploit this flaw to inject malicious scripts into web pages viewed by other users, resulting in unauthorized access to sensitive information or the execution of malicious code. Users are advised to upgrade to the latest version of Zoho Forms to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.