CVE-2024-51854

Summary

CVE-2024-51854 is a Cross-site Scripting (XSS) vulnerability affecting Hola Free Video Player. The flaw, which is DOM-Based, resides in the application's web page generation process. This issue allows malicious actors to inject malicious scripts into a web page viewed by other users, potentially stealing sensitive information or taking control of their sessions. The vulnerability affects Hola Free Video Player versions from n/a to 1.3.9. Users are strongly encouraged to update their software to the latest patch to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.