Reflected XSS Vulnerability in BSK Forms Blacklist

CVE-2024-47624

Summary

The vulnerability in BannerSky BSK Forms Blacklist arises from improper handling of user input during the generation of web pages, resulting in a reflected cross-site scripting (XSS) issue. This flaw can allow attackers to inject malicious scripts into legitimate web pages viewed by users, leading to potential exploitation. Affected versions include those up to 3.8.1, where the vulnerability can be leveraged to execute unauthorized actions or capture sensitive information from the users who interact with the compromised web pages.

References