CVE-2024-53599
CVSS 3.1 Score 5.4 of 10 (medium)
Details
Published Nov 25, 2024
CWE ID 79
Summary
CVE-2024-53599 is a newly discovered cross-site scripting (XSS) vulnerability affecting the /scroll.php endpoint in LafeLabs Chaos version 0.0.1. This issue permits attackers to inject and execute arbitrary web scripts or HTML codes on a targeted user's browser. Successful exploitation could lead to session hijacking, data theft, or other malicious activities. Users are advised to update their LafeLabs Chaos installations as soon as possible to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.