Reflected XSS Vulnerability in Canva's Blog Graphics

CVE-2024-32545

Summary

A Cross-site Scripting (XSS) vulnerability has been identified in Canva's Design Beautiful Blog Graphics tool, which allows attackers to execute malicious scripts in the context of the affected application. This vulnerability arises from an improper neutralization of user input during web page generation, specifically through reflections of untrusted data. Users of versions from n/a through 1.2.4 are susceptible to this security flaw, which could enable an attacker to manipulate the way the application renders content. This could lead to unauthorized actions on behalf of affected users or the exposure of sensitive information.

References