CVE-2024-50546

Summary

CVE-2024-50546 is a Cross-site Scripting (XSS) vulnerability affecting Print Reach, Inc.'s MyOrderDesk software. This issue allows an attacker to inject malicious scripts into a web page, potentially stealing user data or taking control of their session. The vulnerability exists due to improper neutralization of user input during the web page generation process. MyOrderDesk versions from n/a through 3.2.6 are believed to be affected by this issue. Successful exploitation could lead to unauthorized access, data theft, or other malicious activities.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.