CVE-2024-51902
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Summary
CVE-2024-51902 is a Cross-site Scripting (XSS) vulnerability affecting the Oliver Schaal TinyCode web application. The flaw, specifically an Improper Neutralization of Input vulnerability, enables attackers to inject malicious scripts into web pages generated by TinyCode. This stored XSS issue can be exploited to steal user data or take control of user sessions, posing a significant security risk. The susceptible versions of TinyCode span from n/a to 1.2.1. Users are strongly advised to update their software as soon as a patch is released to mitigate this threat.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.