CVE-2024-54398

Summary

CVE-2024-54398 is a newly disclosed vulnerability affecting Project Caruso's Flaming Forms. This issue involves a Cross-Site Request Forgery (CSRF) vulnerability that also permits Stored XSS (Cross-Site Scripting) attacks. The CSRF weakness enables an attacker to execute malicious actions on a user's behalf, while the Stored XSS component allows the injection of malicious scripts into web pages viewed by other users. This vulnerability impacts Flaming Forms versions from n/a through 1.0.1.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.