CVE-2024-29111

Summary

CVE-2024-29111 is a Cross-site Scripting (XSS) vulnerability affecting the Webvitaly Sitekit from versions n/a through 1.6. An attacker can inject malicious scripts into the webpages generated by this software, exploiting improper input neutralization. The stored XSS vulnerability allows the attacker to execute scripts on victims' browsers even after they navigate away from the initial compromised page. This poses a significant risk for sensitive data theft and unauthorized access.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.