CVE-2024-53568

CVSS 3.1 Score 5.4 of 10 (medium)

Details

Published Apr 22, 2025
Updated: Apr 23, 2025
CWE ID 79

Summary

CVE-2024-53568 is a stored cross-site scripting (XSS) vulnerability affecting the Volmarg Personal Management System version 1.4.65. This issue is located in the Image Upload section and enables authenticated attackers to inject malicious scripts or HTML code into the tag parameter. Successful exploitation allows the attacker to execute arbitrary web code on unsuspecting users who have previously viewed a manipulated image, posing a significant risk to data confidentiality and integrity.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share