CVE-2024-51930
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Published Nov 19, 2024
CWE ID 79
Summary
CVE-2024-51930 is a Cross-site Scripting (XSS) vulnerability affecting Jie Wang Custom URL Shortener. The issue, which allows Stored XSS attacks, arises due to improper neutralization of user input during web page generation. This flaw, present in versions from n/a through 0.3.6, could enable an attacker to inject malicious scripts into web pages viewed by other users. Such scripts can steal sensitive information, perform unauthorized actions, or create phishing sites, posing a significant threat to users' security.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.