Reflected Cross-site Scripting (XSS) Vulnerability in Dashing Memberships

CVE-2024-51760

What is CVE-2024-51760?

A Cross-Site Scripting (XSS) vulnerability exists in RistrettoApps Dashing Memberships due to improper neutralization of user input during web page generation. This flaw permits attackers to inject malicious scripts, which can be executed in the context of a user's browser, potentially leading to unauthorized actions, data theft, and session hijacking. The vulnerability affects all versions of Dashing Memberships up to and including 1.1. It is crucial for users to apply relevant security patches to mitigate this risk.

References