CVE-2024-51801

Summary

CVE-2024-51801 is a Cross-Site Scripting (XSS) vulnerability affecting the Jake Brown Brand my Footer plugin. The flaw, which allows DOM-Based XSS, resides in the plugin's web page generation process. An attacker can exploit this vulnerability by injecting malicious scripts into a website's footer, potentially gaining unauthorized access to user data or taking control of user actions on affected websites. This issue affects all versions of Brand my Footer from n/a through 1.1.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.