CVE-2024-50659

Summary

CVE-2024-50659 is a newly disclosed Cross-Site Scripting (XSS) vulnerability affecting iPublish Media Solutions AdPortal version 3.0.39. An attacker can exploit this flaw by injecting malicious scripts into the shippingAsBilling parameter of updateuserinfo.html. Successful exploitation could lead to privilege escalation, enabling attackers to gain unauthorized access to user accounts or perform unintended actions on behalf of the affected users. This vulnerability poses a significant threat, particularly in organizational environments where iPublish Media Solutions AdPortal is utilized. It is recommended that users upgrade to the latest version or apply available patches as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.