CVE-2024-51922

Summary

CVE-2024-51922 is a Cross-site Scripting (XSS) vulnerability affecting the Maruf Arafat VP Sitemap. The flaw, which permits Stored XSS attacks, arises due to improper input neutralization during web page generation. attackers can inject malicious scripts into the sitemap, which are then executed in the browsers of unsuspecting victims, potentially leading to information disclosure, session hijacking, or other serious consequences. The issue impacts all versions of VP Sitemap from n/a through 1.0. Users are urged to update their software as soon as possible to mitigate the risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.