CVE-2024-51650

Summary

CVE-2024-51650 is a newly disclosed vulnerability that impacts the Random Featured Post function in Scott @ MyDollarPlan.com, from version n/a through 1.1.3. This issue combines two threats: a Cross-Site Request Forgery (CSRF) vulnerability and Stored Cross-Site Scripting (XSS). An attacker could exploit the CSRF flaw to induce users to perform unwanted actions on the affected website, while the Stored XSS component allows the attacker to inject malicious scripts that could be executed in the context of the victim's browser, potentially leading to data theft or unauthorized account access.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.