CVE-2024-50540

Summary

CVE-2024-50540 is a Cross-site Scripting (XSS) vulnerability affecting the DemixPress (dp) AddThis plugin. The flaw, located in the web page generation process, introduces improper neutralization of input within this plugin. An attacker can exploit this vulnerability to inject malicious scripts into a affected website, potentially stealing user data or manipulating site functionality. This issue is found in versions from n/a to 1.0.2 of the (dp) AddThis plugin.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.