CVE-2024-51810

CVSS 3.1 Score 6.5 of 10 (medium)

Details

Published Nov 19, 2024
CWE ID 79

Summary

CVE-2024-51810 is a Cross-site Scripting (XSS) vulnerability affecting the George Lewe Lewe Bootstrap Visuals software. The flaw, which permits Stored XSS attacks, occurs during the web page generation process. Hackers can exploit this vulnerability to inject malicious scripts into a victim's web browser, potentially leading to unauthorized access or data theft. The issue affects all versions of Lewe Bootstrap Visuals from n/a through 2.2.2. To mitigate this risk, it is recommended that users upgrade to the latest available version or implement Content Security Policy (CSP) headers to prevent XSS attacks.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share