CVE-2025-24704
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Published Jan 24, 2025
CWE ID 79
Summary
CVE-2025-24704 is a Cross-site Scripting (XSS) vulnerability affecting the Magic the Gathering Card Tooltips from an unknown version through 3.4.0. Malicious actors can exploit this flaw by injecting malicious code into the tooltips during web page generation. This could potentially allow attackers to steal user data, disrupt web functionality, or gain unauthorized access to user accounts. Users are advised to update to the latest version of the Magic the Gathering Card Tooltips to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.