CVE-2024-54237

Summary

CVE-2024-54237 is a Cross-Site Scripting (XSS) vulnerability affecting the anzia Ni CRM Lead from an unspecified version up to 1.3.0. This issue stems from the application's failure to neutralize malicious user input during web page generation. An attacker can exploit this weakness by injecting malicious scripts into the web page, potentially stealing user data or taking control of their sessions. This vulnerability poses a significant risk, and users are urged to update their Ni CRM Lead installations as soon as possible to mitigate the threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.