CVE-2024-52463
CVSS 3.1 Score 7.1 of 10 (high)
Details
Published Dec 2, 2024
CWE ID 79
Summary
CVE-2024-52463 is a Cross-site Scripting (XSS) vulnerability affecting Kat Hagan Post By Email, version from n/a through 1.0.4b. This issue arises due to improper neutralization of user input during web page generation, allowing attackers to inject malicious scripts. Consequently, unsuspecting users visiting a specially crafted webpage could have their browsers execute the attacker's code, potentially leading to information disclosure or session hijacking. Users are advised to update their Post By Email software to the latest version to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share