CVE-2024-38752

Summary

CVE-2024-38752 is an XSS (Cross-Site Scripting) vulnerability affecting Zoho Campaigns from versions n/a through 2.0.8. Malicious code can be injected into web pages generated by Zoho Campaigns, posing a risk to unsuspecting users who visit affected pages. An attacker could manipulate user interactions, steal sensitive data, or launch further attacks. Users are advised to upgrade to the latest software version to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.