CVE-2024-51861

Summary

CVE-2024-51861 is a Cross-site Scripting (XSS) vulnerability affecting the EventPress application from version n/a through 1.0.0. An attacker can exploit this issue by injecting malicious code into input fields on the duogeek EventPress website. The vulnerability arises due to improper neutralization of user input during web page generation, resulting in stored XSS. Successful exploitation could lead to unauthorized access to user data or the execution of malicious scripts within the user's browser. This vulnerability poses a significant risk and requires immediate attention from EventPress users to update to a secure version.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.