CVE-2024-51824
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Summary
CVE-2024-51824 is a Cross-site Scripting (XSS) vulnerability affecting the Advanced Video Player with Analytics from sony7596, mrseankumar25, and miraclewebssoft. This issue stems from the improper neutralization of user inputs during web page generation, enabling attackers to inject malicious scripts into a targeted user's browser. Successful exploitation could lead to session hijacking, data theft, or even complete takeover of the user's account. This vulnerability impacts all versions of the Advanced Video Player with Analytics from n/a to the latest release. Users are strongly advised to update their software promptly to mitigate the risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.