CVE-2024-54317

Summary

CVE-2024-54317 is a Cross-site Scripting (XSS) vulnerability affecting Google Web Stories. The flaw, which permits Stored XSS attacks, is rooted in improper neutralization of user input during web page generation. Affected versions of Google Web Stories range from n/a to 1.37.0. Successful exploitation can result in the injection of malicious scripts into web pages, potentially leading to unauthorized data access or theft of user information. Users and administrators are advised to update their Web Stories as soon as a patch becomes available to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.