CVE-2024-51687
CVSS 3.1 Score 7.1 of 10 (high)
Details
Summary
CVE-2024-51687 is a newly disclosed vulnerability affecting the Platform.Ly Official platform. This issue involves a Cross-Site Request Forgery (CSRF) vulnerability that also allows Stored XSS attacks. The CSRF flaw enables an attacker to force a user to perform unintended actions on the Platform.Ly Official website, while the Stored XSS component allows an attacker to inject malicious code into web pages viewed by other users. These vulnerabilities pose a significant risk as they can lead to unauthorized actions and data compromise. Platform.Ly Official versions from n/a through 1.1.3 are reported to be susceptible to these issues.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.