CVE-2024-51893
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Published Nov 19, 2024
CWE ID 79
Summary
CVE-2024-51893 is a Cross-site Scripting (XSS) vulnerability affecting the Postify: Post Layout For Elementor theme from ThemeAtelier. The issue allows an attacker to inject malicious code into a webpage by exploiting improper input neutralization during web page generation. This vulnerability can lead to DOM-Based XSS attacks, potentially stealing user data or taking control of user sessions. The affected version range is from n/a to 1.0.1. Users are advised to update to the latest version to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.