CVE-2024-51897

Summary

CVE-2024-51897 is a Cross-site Scripting (XSS) vulnerability affecting Erik Saulnier News Articles. The weakness lies in the improper neutralization of user input during web page generation. An attacker can exploit this flaw to inject malicious scripts into web pages viewed by other users, potentially stealing sensitive information or taking control of their accounts. The affected versions of News Articles range from n/a to 1.0.0. It is recommended that users upgrade to a patched version as soon as possible to mitigate the risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.