CVE-2024-51857
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Summary
CVE-2024-51857 is a Cross-Site Scripting (XSS) vulnerability affecting Olympus Shortcodes, from an unspecified version through 1.0.4. This issue stems from improper neutralization of user input during the generation of Olympus Themes web pages. Malicious scripts injected through this vulnerability can manipulate a user's browser and potentially steal sensitive data or take control of their session. This poses a significant risk to websites using the impacted versions of Olympus Shortcodes. Users are urged to update to a patched version as soon as possible to mitigate this threat.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.