CVE-2024-47648
CVSS 3.1 Score 6.1 of 10 (medium)
Details
Published Oct 10, 2024
Updated: Nov 14, 2024
CWE ID 601
Summary
CVE-2024-47648 is a new Open Redirect vulnerability affecting EventPrime, an events software solution. Maliciously crafted URLs can redirect unsuspecting users to untrusted sites, potentially exposing them to phishing attacks or malware downloads. EventPrime versions from n/a to 4.0.4.5 are reportedly affected by this issue. Users are advised to apply patches or updates as soon as they become available to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- WordPress