CVE-2024-51618

Summary

CVE-2024-51618 is a Cross-site Scripting (XSS) vulnerability affecting the DuoGeek Custom Admin Menu. The flaw, which permits Stored XSS attacks, occurs during the web page generation process. Attackers can exploit this vulnerability by injecting malicious scripts into the affected website, potentially stealing user data or executing malicious code. This issue impacts all versions of the Custom Admin Menu, from the initial release through 1.0.0. Users are advised to update to the latest version or apply appropriate patches as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.