CVE-2024-56024
CVSS 3.1 Score 7.1 of 10 (high)
Details
Summary
CVE-2024-56024 is a Cross-site Scripting (XSS) vulnerability affecting the DuoGeek Custom Dashboard Widget. The issue arises from improper neutralization of user inputs during web page generation. Malicious scripts can be injected and executed in the context of the affected user, potentially leading to data theft or unauthorized system access. This vulnerability exists in all versions of the DuoGeek Custom Dashboard Widget, from the initial release through version 1.0.0. It is crucial for users to apply the necessary patches or upgrades as soon as possible to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.