CVE-2024-51657
CVSS 3.1 Score 7.1 of 10 (high)
Details
Summary
CVE-2024-51657 is a newly disclosed vulnerability affecting Woopy Plugins SmartLink Dynamic URLs. The issue involves a Cross-Site Request Forgery (CSRF) vulnerability, which can be exploited to execute Stored XSS (Cross-Site Scripting) attacks. This weakness allows unauthorized users to inject malicious scripts into a victim's web browser, potentially stealing sensitive information or gaining unauthorized access. The vulnerability is present in SmartLink Dynamic URLs versions from n/a through 1.1.0. Users are encouraged to update their plugins as soon as a patch is released to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.