CVE-2024-1257

Summary

CVE-2024-1257 is a newly disclosed vulnerability affecting Jspxcms version 10.2.0. This issue is classified as problematic, and it targets an unknown function in the /ext/collect/find_text.do file. The exploitation results in cross-site scripting, making it possible for attackers to inject malicious code into a user's web browser. Since the exploit has been made public, remote attacks are a concern.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.