CVE-2024-51803

Summary

CVE-2024-51803 is a newly disclosed Cross-Site Scripting (XSS) vulnerability that affects Magnetic Creative's Inline Click To Tweet component. The flaw, which allows Dom-Based XSS, stems from an improper neutralization of user input during web page generation. Malicious scripts can be injected and executed within the user's browser when they visit a specially crafted webpage, potentially resulting in unauthorized access to sensitive data or session hijacking. The vulnerability affects all versions of Inline Click To Tweet from n/a through 1.0.0. Users are strongly advised to update their systems promptly to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.