CVE-2024-43152

CVSS 3.1 Score 5.9 of 10 (medium)

Details

Published Aug 12, 2024
Updated: Aug 13, 2024
CWE ID 79

Summary

CVE-2024-43152 is a Cross-Site Scripting (XSS) vulnerability affecting the 3D FlipBook – PDF Flipbook Viewer and Flipbook Image Gallery from version n/a to 1.15.6. The flaw lies in improper neutralization of user input during web page generation, allowing attackers to inject and execute malicious scripts in a victim's browser. This could potentially lead to unauthorized access, data theft, or other serious consequences. Users are strongly encouraged to update to a secure version of these applications as soon as possible.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share