CVE-2024-51920

CVSS 3.1 Score 6.5 of 10 (medium)

Details

Published Nov 19, 2024
CWE ID 79

Summary

CVE-2024-51920 is a Cross-Site Scripting (XSS) vulnerability affecting the Map Store Locator component of JDev, from version n/a through 1.2.1. attackers can exploit this issue by injecting malicious scripts into web pages generated by the Map Store Locator. These scripts can be executed in the victim's browser, potentially stealing sensitive information or taking control of their account. This vulnerability occurs due to improper neutralization of user input, allowing attackers to inject malicious code into the application. It is essential for users to update to the latest version of Map Store Locator to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share