CVE-2024-51891

Summary

CVE-2024-51891 is a Cross-site Scripting (XSS) vulnerability affecting the Official SalesWizard CRM Plugin from 4B Systems sp. z o.o. The issue arises due to improper neutralization of user input during web page generation. An attacker can exploit this flaw to inject malicious scripts into a webpage which is then stored and reused on subsequent visits, leading to Stored XSS. Versions of the plugin from n/a through 1.0.2 are reportedly impacted. This vulnerability poses a significant risk as it can result in data theft or unauthorized actions on affected systems. Users are strongly urged to update to a patched version as soon as possible.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.