CVE-2024-54322
CVSS 3.1 Score 7.1 of 10 (high)
Details
Summary
CVE-2024-54322 is a newly disclosed Cross-Site Scripting (XSS) vulnerability affecting the Ederson Peka Media Downloader. Specifically, the software fails to properly neutralize user inputs during web page generation, creating an opportunity for attackers to inject malicious scripts. This issue poses a risk of data theft or unauthorized account takeover for users visiting a specially crafted webpage. The Media Downloader, from an unknown version through 0.4.7.4, is reportedly affected by this vulnerability. Users are advised to update their software as soon as a patch becomes available to mitigate the risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.