CVE-2024-51641

Summary

CVE-2024-51641 is a newly disclosed Cross-Site Request Forgery (CSRF) vulnerability in jcmlmorav's Advanced PDF Generator. Malicious actors can exploit this issue to execute Stored Cross-Site Scripting (XSS) attacks on unsuspecting users. This vulnerability exists in versions of Advanced PDF Generator ranging from n/a to 0.4.0. Successful exploitation could lead to unintended actions being taken on behalf of the victim, such as session hijacking or data theft. Users are advised to update their Advanced PDF Generator installations to a patched version as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.