CVE-2024-23505
CVSS 3.1 Score 5.4 of 10 (medium)
Details
Published Jan 31, 2024
Updated: Feb 5, 2024
CWE ID 79
Summary
CVE-2024-23505 is a Cross-site Scripting (XSS) vulnerability affecting the DearHive PDF Viewer & 3D PDF Flipbook – DearPDF. The flaw, which permits Stored XSS attacks, is due to improper neutralization of user input during web page generation. This issue poses a significant risk as it can allow malicious actors to inject and execute malicious scripts within the affected application. The vulnerability affects all versions of the PDF Viewer & 3D PDF Flipbook – DearPDF from n/a through 2.0.38.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share