CVE-2024-51875

CVSS 3.1 Score 6.5 of 10 (medium)

Details

Published Nov 19, 2024
CWE ID 79

Summary

CVE-2024-51875 is a Cross-site Scripting (XSS) vulnerability affecting Nazmul Ahsan MDC YouTube Downloader. The weakness lies in the improper neutralization of user input during web page generation. As a result, an attacker can inject malicious scripts into the application, leading to DOM-Based XSS attacks. This issue poses a security risk to users of the MDC YouTube Downloader, with versions from n/a to 3.0.0 being affected.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share