CVE-2022-4960

Summary

CVE-2022-4960 is a newly disclosed vulnerability affecting the cloudfavorites favorites-web 1.3.0 component's Nickname Handler functionality. This issue allows for cross-site scripting attacks, which can be exploited remotely. The manipulation results in the injection of malicious scripts into a victim's web browser, potentially leading to sensitive data theft or unauthorized system access. The public disclosure of the exploit increases the risk of widespread exploitation. (VDB-250238)

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.