CVE-2024-51816

CVSS 3.1 Score 6.5 of 10 (medium)

Details

Published Nov 19, 2024
CWE ID 79

Summary

CVE-2024-51816 is a Cross-site Scripting (XSS) vulnerability affecting the Saul Morales Pacheco Banner System. The issue arises from improper neutralization of user input during web page generation, leading to Stored XSS. attackers can inject malicious scripts into a banner system, which in turn get executed in the context of other users, potentially leading to unauthorized access or data theft. The vulnerability can be exploited by attackers by inserting malicious scripts into the banner system, which can then be executed in the context of other users, posing a significant security risk. The issue affects all versions of the Banner System from n/a through 1.0.0. Users are advised to upgrade to a patched version as soon as possible to mitigate this threat.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share