CVE-2024-51923

Summary

CVE-2024-51923 is a Cross-site Scripting (XSS) vulnerability affecting the Websand Subscription Form. The flaw, which permits Stored XSS attacks, exists due to improper neutralization of user inputs during web page generation. This issue can be exploited to inject malicious scripts into a victim's browser, potentially leading to data theft or unauthorized account access. Affected versions of Websand Subscription Form range from n/a to 1.0.3. Users are advised to update to the latest version or take other appropriate measures to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.