CVE-2024-50522

Summary

CVE-2024-50522 is a Cross-site Scripting (XSS) vulnerability affecting the Redy Ru WeChat Subscribers Lite application. The flaw stems from improper neutralization of user input during web page generation. An attacker can exploit this issue to inject malicious scripts into web pages viewed by other users. This vulnerability exists in versions of WeChat Subscribers Lite from n/a to 1.6.6. Successful exploitation could lead to unintended execution of attacker-supplied code, potentially stealing user data or taking control of their accounts.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.