CVE-2024-51638

Summary

CVE-2024-51638 is a newly disclosed vulnerability affecting Sanjeev Mohindra Awesome Shortcodes For Genesis. This issue combines the risks of Cross-Site Request Forgery (CSRF) and Stored Cross-Site Scripting (XSS), allowing attackers to execute malicious scripts in users' browsers. The CSRF vulnerability enables unauthorized requests to be made on behalf of a user, while the Stored XSS component allows attackers to inject and save malicious scripts that persist even after a user logs out. The affected version range of Awesome Shortcodes For Genesis is from n/a through .8.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.