CVE-2024-51858

Summary

CVE-2024-51858 is a Cross-site Scripting (XSS) vulnerability affecting Umar Social Locker, specifically versions from n/a to 1.1. This issue arises from improper neutralization of user input during web page generation. An attacker can exploit this flaw to inject malicious scripts into a webpage, enabling unauthorized access to user data or sessions. The consequence is a Stored XSS attack, where the malicious code remains active until the affected page is manually updated or the user logs out.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.