CVE-2024-32548

Summary

CVE-2024-32548 is a Cross-site Scripting (XSS) vulnerability affecting the What's New Generator from version n/a through 2.0.2. An attacker can exploit this Improper Neutralization of Input issue during web page generation to inject and execute malicious scripts in users' browsers. The impact includes potential data theft and unauthorized actions within the user's context. Users are advised to update their What's New Generator software as soon as a patch is available.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.