CVE-2024-51897
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Published Nov 19, 2024
CWE ID 79
Summary
CVE-2024-51897 is a Cross-Site Scripting (XSS) vulnerability affecting Erik Saulnier News Articles. The flaw, which allows Stored XSS attacks, is located in the web page generation process. Attackers can inject malicious code into the News Articles application, which is then stored and executed in users' browsers. This can lead to unauthorized access to sensitive information or the ability to carry out further attacks. The vulnerability impacts News Articles versions from n/a through 1.0.0.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share