CVE-2024-50538

Summary

CVE-2024-50538 is a Cross-site Scripting (XSS) vulnerability affecting Irfan Ardiansah's Show Visitor IP Address software. The flaw, which allows Stored XSS attacks, resides in the application's web page generation process where input is not properly neutralized. Attackers can exploit this vulnerability by injecting malicious scripts into the targeted webpage, which in turn can be executed in users' browsers when they visit the site. The issue affects versions of the software from n/a through 0.2.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.