CVE-2024-51897

CVSS 3.1 Score 6.5 of 10 (medium)

Details

Published Nov 19, 2024
CWE ID 79

Summary

CVE-2024-51897 is a Cross-Site Scripting (XSS) vulnerability affecting Erik Saulnier News Articles. The flaw, which allows Stored XSS attacks, is located in the web page generation process. Attackers can inject malicious code into the News Articles application, which is then stored and executed in users' browsers. This can lead to unauthorized access to sensitive information or the ability to carry out further attacks. The vulnerability impacts News Articles versions from n/a through 1.0.0.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share