CVE-2024-51655

Summary

CVE-2024-51655 is a newly disclosed vulnerability affecting the Microkid Custom Author URL software. This issue combines Cross-Site Request Forgery (CSRF) and Stored Cross-Site Scripting (XSS), allowing attackers to execute malicious scripts on unsuspecting users. The CSRF vulnerability enables an attacker to submit unintended commands to the affected system on behalf of the victim, while the Stored XSS component allows the attacker to inject malicious code into web pages viewed by the victim. This vulnerability affects versions of Custom Author URL from n/a through 2.0.1. Users are strongly advised to upgrade to a patched version as soon as possible to mitigate the risks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.