CVE-2024-56210
CVSS 3.1 Score 7.1 of 10 (high)
Details
Published Dec 31, 2024
CWE ID 79
Summary
CVE-2024-56210 is a Cross-site Scripting (XSS) vulnerability affecting DeluxeThemes Userpro from versions n/a through 5.1.9. Maliciously crafted input during web page generation in Userpro is not properly neutralized, allowing attackers to inject and execute malicious scripts in users' browsers. This issue poses a significant risk as it can lead to data theft, session hijacking, and other unauthorized actions. Users are strongly advised to update their Userpro installations to the latest version to mitigate this vulnerability.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.