CVE-2024-47643

Summary

CVE-2024-47643 is a Cross-site Scripting (XSS) vulnerability affecting the Alexander Böhm Include Fussball.De Widgets, with versions from n/a to 4.0.0 inclusive. Maliciously crafted input can be stored and executed within the web pages, potentially leading to unintended actions or unauthorized access by attackers. This issue poses a significant risk, as it allows for the injection of malicious scripts into unsuspecting users' browsers, leading to privacy violations, stolen data, or even system takeover. Users are advised to update to the latest version of the widgets to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.