Cross-site Scripting Vulnerability in NAVER Analytics by Minjun Kim

CVE-2024-51700

What is CVE-2024-51700?

The vulnerability in NAVER Analytics, created by Minjun Kim, arises from improper handling of user input during the generation of web pages, leading to a stored Cross-site Scripting (XSS) flaw. This vulnerability allows attackers to inject malicious scripts that can be executed in the context of a user’s session, potentially compromising sensitive information and user security. Users running versions from n/a through 0.9 are particularly at risk and should take immediate action to remediate the issue.

References