CVE-2024-51646
CVSS 3.1 Score 7.1 of 10 (high)
Details
Published Dec 18, 2024
CWE ID 79
Summary
CVE-2024-51646 is a Cross-site Scripting (XSS) vulnerability affecting Saoshyant Element, a web application component. The flaw stems from improper input neutralization during web page generation. An attacker can exploit this issue to inject malicious scripts into a website, potentially stealing user data or taking control of their browsing sessions. Saoshyant Element versions 1.2 and below are susceptible to this Reflected XSS vulnerability.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.