CVE-2024-52348

Summary

CVE-2024-52348 is an input validation vulnerability affecting the AA Audio Player, which allows Dom-Based Cross-site Scripting (XSS). The issue lies in the way the extension generates web pages, failing to neutralize malicious input properly. This flaw can lead to unauthorized code execution within the context of the affected webpage, potentially leading to data theft or session hijacking. The vulnerability affects AA Audio Player versions from n/a through 1.0.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.