CVE-2024-54226

Summary

CVE-2024-54226 is a newly disclosed vulnerability affecting the Karl Kiesinger Country Blocker software. This issue combines a Cross-Site Request Forgery (CSRF) weakness with the potential for Stored Cross-Site Scripting (XSS). The CSRF flaw allows an attacker to manipulate unsuspecting users into performing unintended actions, while the Stored XSS vulnerability enables the injection of malicious scripts into web pages that can be executed when users visit the affected site. The CVE affects Country Blocker versions from n/a through 3.2.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.