CVE-2024-51874

Summary

CVE-2024-51874 is a Cross-Site Scripting (XSS) vulnerability affecting ParOne Feeds from an unknown version up to 1.17.1. An attacker can exploit this issue by injecting malicious scripts into web pages generated by ParOne Feeds, potentially gaining unauthorized access to user data or taking control of user sessions. This vulnerability arises due to improper neutralization of user input, allowing for DOM-based attacks. Users are advised to update their ParOne Feeds to the latest version to mitigate the risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.