CVE-2024-48170

Summary

CVE-2024-48170 is a Cross-Site Scripting (XSS) vulnerability affecting PHPGurukul Small CRM version 3.0. An attacker can exploit this issue by injecting a malicious payload into the name field of the profile.php page, potentially stealing user session cookies or executing malicious scripts in the browser of unsuspecting victims. This vulnerability poses a significant risk to organizations using this CRM software and requires immediate patching to mitigate the threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.