Reflected XSS Vulnerability in Purity Of Soul

CVE-2024-43348

What is CVE-2024-43348?

A reflected cross-site scripting (XSS) vulnerability exists in the Purity Of Soul product by Iznyn, allowing attackers to inject malicious scripts into web pages viewed by other users. This flaw emerges from improper input handling during web page generation, leading to potential exploitation by malicious actors who can manipulate the content displayed to users. Affected versions from n/a through 1.9 are susceptible to this vulnerability, which could result in unauthorized actions and compromised user data.

References